docs: end-to-end gardening — links, stale refs, tailscale.md update

Comprehensive documentation gardening across the merged repo:

- tailscale.md: fully rewritten with current ground truth. The netinfra
  pair now runs production Technitium with all knel.net records
  replicated. Both LAN IPs resolve knel.net device names and recurse
  externally. The old "NXDOMAIN / zone is stale" findings are replaced
  with the resolved state and current recommendations.
- AGENTS.md: rewritten with Gitea-compatible clickable relative links
  to all key scripts and docs. Autonomous commit/push policy
  prominently documented. SSH user corrected to localuser.
- README.md: directory table and docs table now use clickable links.
- All .md cross-references converted to Gitea-renderable relative links.
- Stale path references (ProjectCode/, Project-Tests/, ProjectDocs/)
  updated to current names (provisioning/, tests/) across all docs.
- Stale repo name "FetchApply" / "KNELServerBuild" updated to
  "PFVCluster" in actionable docs; historical AI-review docs tagged
  with an HTML comment notice.
- REFACTORING-EXAMPLES.md: tagged as historical (pre-refactor patterns).
- tests/README.md, dns-cluster-setup/README.md, docs/DEPLOYMENT.md,
  docs/SECURITY.md: path references fixed to current structure.

🤖 Generated with [Crush](https://github.com/charmassociates/crush)

Assisted-by: GLM-5 via Crush <crush@charm.land>

docs/CODE-REVIEW-FINDINGS.md

@@ -1,4 +1,5 @@
-# TSYS FetchApply Code Review Findings
+<!-- Historical AI-generated review. Paths may reference pre-merge structure. -->
+# TSYS PFVCluster Code Review Findings
 
 **Review Date:** July 14, 2025  
 **Reviewer:** Claude (Anthropic)  
@@ -11,7 +12,7 @@ The repository shows good architectural structure with centralized framework com
 ## Critical Issues (High Priority)
 
 ### 1. Package Installation Performance ⚠️
-**Location:** `ProjectCode/SetupNewSystem.sh:27` and `Lines 117-183`
+**Location:** `provisioning/SetupNewSystem.sh:27` and `Lines 117-183`
 **Issue:** Multiple separate package installation commands causing performance bottlenecks
 ```bash
 # Current inefficient pattern
@@ -23,7 +24,7 @@ DEBIAN_FRONTEND="noninteractive" apt-get -qq --yes install virt-what auditd ...
 **Fix:** Combine all package installations into single command
 
 ### 2. Network Operations Lack Error Handling 🔴
-**Location:** `ProjectCode/SetupNewSystem.sh:61-63`, multiple modules
+**Location:** `provisioning/SetupNewSystem.sh:61-63`, multiple modules
 **Issue:** curl commands without timeout or error handling
 ```bash
 # Vulnerable pattern
@@ -33,7 +34,7 @@ curl --silent ${DL_ROOT}/path/file >/etc/config
 **Fix:** Add timeout, error handling, and retry logic
 
 ### 3. Unquoted Variable Expansions 🔴
-**Location:** Multiple files, including `ProjectCode/SetupNewSystem.sh:244`
+**Location:** Multiple files, including `provisioning/SetupNewSystem.sh:244`
 **Issue:** Variables used without proper quoting creating security risks
 ```bash
 # Risky pattern
@@ -57,7 +58,7 @@ chsh -s $(which zsh) root
 ## Performance Optimization Opportunities
 
 ### 6. Individual File Downloads 🟡
-**Location:** `ProjectCode/Modules/Security/secharden-scap-stig.sh:66-77`
+**Location:** `provisioning/Modules/Security/secharden-scap-stig.sh:66-77`
 **Issue:** 12+ individual curl commands for config files
 ```bash
 curl --silent ${DL_ROOT}/path1 > /etc/file1
@@ -171,9 +172,9 @@ function download_configurations() {
     print_info "Downloading configuration files..."
     
     local -A configs=(
-        ["${DL_ROOT}/ProjectCode/ConfigFiles/ZSH/tsys-zshrc"]="/etc/zshrc"
-        ["${DL_ROOT}/ProjectCode/ConfigFiles/SMTP/aliases"]="/etc/aliases"
-        ["${DL_ROOT}/ProjectCode/ConfigFiles/Syslog/rsyslog.conf"]="/etc/rsyslog.conf"
+        ["${DL_ROOT}/provisioning/ConfigFiles/ZSH/tsys-zshrc"]="/etc/zshrc"
+        ["${DL_ROOT}/provisioning/ConfigFiles/SMTP/aliases"]="/etc/aliases"
+        ["${DL_ROOT}/provisioning/ConfigFiles/Syslog/rsyslog.conf"]="/etc/rsyslog.conf"
     )
     
     for url in "${!configs[@]}"; do
@@ -261,7 +262,7 @@ function test_network_error_handling() {
 
 ## Conclusion
 
-The TSYS FetchApply repository has a solid foundation but requires systematic improvements to meet production reliability standards. The recommended fixes will significantly enhance:
+The TSYS PFVCluster repository has a solid foundation but requires systematic improvements to meet production reliability standards. The recommended fixes will significantly enhance:
 
 - **Deployment reliability** through better error handling
 - **Security posture** through integrity verification