A resident ops agent for Debian servers — daily sweep, AI plans, human gate

No pipelines have been run yet.