Post-reboot audit PASS + night window extended to 22:00-07:00 (#610)

Verified after the 22:53 multiqueue bounce: NIC queues live at 4/4 and
2/2 (the whole point of the reboot), PVE config clean with nothing
pending, both gateway lanes healthy, all 9 Open Terminal ports bound on
the tailscale IP, PSI metrics fresh, and no removed relaunchers
respawned. Moved the day-profile flip from 05:00 to 07:00 per human
ruling (live timer re-armed + staged copy and docs synced; the gateway
z.ai peak ladder is untouched). Also staged a ready-to-run script that
drops each account's own Open Terminal key into its ~/.creds as
openwebui.creds - not run yet; the master key list stays at
~/.creds/open-terminal.env.

💘 Generated with Crush

Assisted-by: Crush:glm-5.2

[#610]

11-shift-day-flip-0700.sh

@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+# 11-shift-day-flip-0700.sh — night-profile window 22:00-05:00 -> 22:00-07:00
+# (#610 session, human ruling 2026-09-01: "Charles isn't using the VM"
+# hours now end 07:00). Moves the LIVE day-flip timer to 07:00 and
+# re-arms it. Repo staged copy + docs synced in the same commit.
+# The z.ai gateway peak ladder (01:00-05:00) is NOT touched.
+#   ~/projects/ultix/11-shift-day-flip-0700.sh
+set -euo pipefail
+[ "$EUID" -eq 0 ] || exec sudo bash "$0"
+
+OUT=/home/reachableceo/projects/ultix/11-shift-day-flip-0700.out
+exec > >(tee "$OUT") 2>&1
+echo "== day flip 05:00 -> 07:00 $(date -Is) =="
+
+LIVE=/etc/systemd/system/ukrrs-dayprofile.timer
+sed -i 's/05:00:00/07:00:00/; s/day profile at 05:00/day profile at 07:00/' "$LIVE"
+systemctl daemon-reload
+systemctl restart ukrrs-dayprofile.timer
+
+echo "-- live timer now --"
+cat "$LIVE"
+echo "-- armed timers --"
+systemctl list-timers 'ukrrs-*profile*' --no-pager
+echo "-- current profile markers --"
+sysctl vm.dirty_bytes vm.dirty_background_bytes 2>/dev/null || true
+
+chown reachableceo:reachableceo "$OUT" 2>/dev/null || true
+echo "== done $(date -Is) =="