feat(kuma): Cloudron HTTP-200 coverage + group discipline [#435]

55 http monitors added under "Cloud Systems" (blue/green: canary first,
verified green); 9 root-level strays re-homed into founder's groups
(root now zero). New tools: inventory (read-only dump), cloudron-sync
(idempotent diff/add from committed app list), regroup (lib-based moves;
raw editMonitor times out on this build). fleet-sync now requires
--group-id so it can never place monitors at root again.

Results: https://projects.knownelement.com/issues/435#note-4

oam/kuma/cloudron-apps.txt

@@ -0,0 +1,55 @@
+ap4ap.org
+bi.knownelement.com
+bookmarks.knownelement.com
+broadcast.thepeernet.com
+broadcast.turnsys.com
+building-management.knownelement.com
+chat.knownelement.com
+community.turnsys.com
+erp.knownelement.com
+esign.knownelement.com
+ezeda.org
+ezpodstack.org
+finance.turnsys.com
+forms.knownelement.com
+git.knownelement.com
+grafana.knownelement.com
+helpdesk.knownelement.com
+hfnfc.net
+hfnoc.net
+ipam.knownelement.com
+jupyter.knownelement.com
+knownelement.com
+learn.turnsys.com
+marketing.turnsys.com
+matrix.turnsys.com
+meetmorse.com
+merchantsofhope.org
+my.knownelement.com
+nextcloud.knownelement.com
+paperless.knownelement.com
+photos.knownelement.com
+phplist.knownelement.com
+projects.knownelement.com
+pwvault.turnsys.com
+rackrental.net
+reachableceo.com
+readlater.knownelement.com
+recordings.thepeernet.com
+redwfo.com
+rss.knownelement.com
+rwscp.net
+sidedoorgroup.org
+sol-calc.com
+startinglineproductions.com
+staticbits.knownelement.com
+status.knownelement.com
+suborbital-systems.com
+surveys.knownelement.com
+thepeernet.com
+turnsys.com
+uksrs.org
+url.knownelement.com
+webmail.knownelement.com
+webstats.knownelement.com
+whiteboard.knownelement.com