Rebuild runbook + state capture + docs sync to current reality (#615)

REBUILD.md maps a full rebuild (PVE qm spec incl. nested-virt flag,
guest OS/accounts/dotfiles bootstrap, script order, package baseline,
verification checklist). 14-capture-state.sh regenerates docs/state
snapshots (guest apt/units/sysctl/fstab/docker + PVE 5111 config).
Docs sync: stale multiqueue-owed text removed from NEXT/REPORT/RUNBOOK;
README script list + open-work list current.

Details: https://projects.knownelement.com/issues/615

docs/state/guest-docker-pkg.txt

@@ -0,0 +1,6 @@
+docker-ce:
+  Installed: 5:29.7.2-1~debian.13~trixie
+  Candidate: 5:29.7.2-1~debian.13~trixie
+docker.io:
+  Installed: (none)
+  Candidate: 26.1.5+dfsg1-9+deb13u1