misc: zot registry, k8s OIDC, server configs, sandbox experiments, and notes

- docker-30/zot: add Zot OCI registry with on-demand sync to docker.io,
  registry.k8s.io, ghcr.io, quay.io
- kubernetes-kvm-terraform: wire Kanidm OIDC via structured
  AuthenticationConfiguration; add reference apiserver manifest and
  join-node-02 helper
- servers: reorganize shadow/ under servers/, add saint vhost config and
  utility-101 VM definition, add shadow hrajfrisbee.cz vhost and
  storage-23 notes
- experiments: add notes and configs for e2b dev VM, kata + firecracker
  on kube, microsandbox, orb-stack k3s (terraform + cloud-init), rke2
- vms/docker: document tailscale + node-exporter setup
- blog: stub post on Gateway API
- chore: gitignore tmp/, smtp_password, and the two local-only
  credential caches; add per-project .claude/settings.json

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

servers/saint/export-vms.md

@@ -0,0 +1,49 @@
+## export VMs
+
+```bash
+# vms need to get exported so that i can do something with outdated hypervisor
+
+vm=utility-101
+virsh dumpxml $vm > $vm-saint.xml
+virsh domblklist $vm
+# /srv/vms-normal-hdd/utility-101.qcow2
+
+tar -cvzf ${vm}-saint-backup.tar.gz ${vm}-saint.xml /srv/vms-normal-hdd/utility-101.qcow2
+
+vm=storage
+h=saint
+virsh shutdown $vm
+virsh dumpxml $vm > $vm-$h.xml
+virsh domblklist $vm
+# /srv/vms-normal-hdd/storage.qcow2
+
+tar -cvzf ${vm}-${h}-backup.tar.gz ${vm}-${h}.xml /srv/vms-normal-hdd/storage.qcow2
+
+# ----
+vm=docker
+h=saint
+virsh shutdown $vm
+virsh dumpxml $vm > $vm-$h.xml
+virsh domblklist $vm
+# /srv/vms-ssd/docker.qcow2
+# /srv/vms-normal-hdd/docker-srv.qcow2
+# /srv/vms-normal-hdd/docker-vgroot-2.qcow2
+
+tar -cvzf ${vm}-${h}-backup.tar.gz ${vm}-${h}.xml /srv/vms-ssd/docker.qcow2 /srv/vms-normal-hdd/docker-srv.qcow2 /srv/vms-normal-hdd/docker-vgroot-2.qcow2
+
+
+# ----
+vm=demon
+h=agent
+virsh shutdown $vm
+virsh dumpxml $vm > $vm-$h.xml
+virsh domblklist $vm
+# /srv/nfs/data/vms-moved-from-failing-disk/demon_1.img
+# /srv/nfs/data/vms-moved-from-failing-disk/demon_2nd_disk.img
+
+tar -cvzf ${vm}-${h}-backup.tar.gz ${vm}-${h}.xml /srv/nfs/data/vms-moved-from-failing-disk/demon_1.img /srv/nfs/data/vms-moved-from-failing-disk/demon_2nd_disk.img
+
+
+
+
+```