fix(access): ultix-field uses ultixfield, stlpc-garage done, -t fix for su

access-matrix.sh:
- ultix-field mapped to ultixfield (was falling through to localuser)

bootstrap-all.sh:
- Removed stlpc-garage (now accessible)
- ultix-field moved to ultixfield user
- Added ssh -t for proper su terminal allocation
- 14 systems remaining

Refs [#403]

💘 Generated with Crush

Assisted-by: Crush:glm-5.2

bootstrap-all.sh

@@ -2,8 +2,8 @@
 # bootstrap-all.sh — push agent key + sudo to every remaining NO-KEY system.
 #
 # Groups (user determined by system type):
-#   1. labuser+root  → stlpc-* systems (key to both, no sudo for labuser)
-#   2. subodev       → subopi* systems
+#   1. subodev       → subopi* systems
+#   2. ultixfield    → ultix-field
 #   3. localuser     → everything else (cloudron, siem, ubuntu server, kali, etc.)
 #
 # You'll enter passwords interactively. Idempotent: safe to re-run.
@@ -21,7 +21,7 @@ run_as_user() {
   echo "  $name ($ip) — $user"
   echo "========================================"
   if scp "${SSH_OPTS[@]}" "$SCRIPT" "${user}@${ip}:/tmp/" 2>/dev/null; then
-    if ssh "${SSH_OPTS[@]}" "${user}@${ip}" 'su -c "bash /tmp/'"$SCRIPT"'"'; then
+    if ssh -t "${SSH_OPTS[@]}" "${user}@${ip}" 'su -c "bash /tmp/'"$SCRIPT"'"'; then
       echo "  -> $name DONE"; ok=$((ok+1))
     else
       echo "  -> $name FAILED (su to root)"; fail=$((fail+1)); faillist="$faillist $name"
@@ -32,22 +32,22 @@ run_as_user() {
   echo
 }
 
-# === Group 1: labuser (stlpc-* — agent-bootstrap pushes keys to root+labuser) ===
+# === Group 1: subodev (subopi*) ===
 echo "########################################"
-echo "# Group 1: labuser (stlpc-*)"
-echo "########################################"
-echo
-run_as_user stlpc-garage 100.72.192.22 labuser
-
-# === Group 2: subodev (subopi*) ===
-echo "########################################"
-echo "# Group 2: subodev (subopi*)"
+echo "# Group 1: subodev (subopi*)"
 echo "########################################"
 echo
 run_as_user subopi3 100.93.17.77 subodev
 run_as_user subopi-dev-3 100.64.231.65 subodev
 run_as_user subopi-dev-4 100.65.224.85 subodev
 
+# === Group 2: ultixfield ===
+echo "########################################"
+echo "# Group 2: ultixfield"
+echo "########################################"
+echo
+run_as_user ultix-field 100.115.233.124 ultixfield
+
 # === Group 3: localuser (everything else) ===
 echo "########################################"
 echo "# Group 3: localuser (standard systems)"
@@ -63,7 +63,6 @@ run_as_user preprod-siem 100.98.162.14 localuser
 run_as_user sectestbed-cloudron 100.97.140.105 localuser
 run_as_user sectestbed-siem 100.108.121.18 localuser
 run_as_user tsys-siem 100.72.35.113 localuser
-run_as_user ultix-field 100.115.233.124 localuser
 
 echo "========================================"
 echo "Summary: $ok done, $fail failed"