fix(bootstrap): correct user mappings + scope for remaining NO-KEY systems

bootstrap-all.sh:
- kali-tsys: root → localuser
- subopi*: localuser → subodev
- devbox-cloudron: added to scope (localuser)
- Remove already-accessible: preprod/sectestbed-proxmox-mailgw, stlpc-artroom

access-matrix.sh:
- Remove devbox-cloudron from exclude list (now in scope)

Refs [#403]

💘 Generated with Crush

Assisted-by: Crush:glm-5.2

access-matrix.sh

@@ -6,7 +6,7 @@ set -u
 cd /home/reachableceo/projects/PFVCluster || exit 1
 
 # Policy-excluded systems (never attempt access)
-EXCLUDE=':tsys-umbrel:tsys-cloudron:devbox-cloudron:pfv-bms:stlpc-bizoffice:ultix-highside:'
+EXCLUDE=':tsys-cloudron:pfv-bms:tsys-umbrel:stlpc-bizoffice:ultix-highside:'
 
 printf '%-28s %-16s %-18s %s\n' "NAME" "TS-IP" "ACCESS" "SUDO"
 printf '%-28s %-16s %-18s %s\n' "----" "-----" "------" "----"