Post-reboot audit PASS + night window extended to 22:00-07:00 (#610)

Verified after the 22:53 multiqueue bounce: NIC queues live at 4/4 and
2/2 (the whole point of the reboot), PVE config clean with nothing
pending, both gateway lanes healthy, all 9 Open Terminal ports bound on
the tailscale IP, PSI metrics fresh, and no removed relaunchers
respawned. Moved the day-profile flip from 05:00 to 07:00 per human
ruling (live timer re-armed + staged copy and docs synced; the gateway
z.ai peak ladder is untouched). Also staged a ready-to-run script that
drops each account's own Open Terminal key into its ~/.creds as
openwebui.creds - not run yet; the master key list stays at
~/.creds/open-terminal.env.

💘 Generated with Crush

Assisted-by: Crush:glm-5.2

[#610]

staged/apply-guest.sh

@@ -117,7 +117,7 @@ step_daynight() {
   done
   systemctl daemon-reload
   systemctl enable --now ukrrs-nightprofile.timer ukrrs-dayprofile.timer
-  say "night profile flips at 22:00, day at 05:00; test: ukrrs-daynight.sh night"
+  say "night profile flips at 22:00, day at 07:00; test: ukrrs-daynight.sh night"
 }
 step_all() {
   step_sysctl; step_modules; step_thp; step_slices; step_psi; step_prune

staged/systemd/ukrrs-dayprofile.timer

@@ -1,8 +1,8 @@
 [Unit]
-Description=UKRRS: day profile at 05:00
+Description=UKRRS: day profile at 07:00
 
 [Timer]
-OnCalendar=*-*-* 05:00:00
+OnCalendar=*-*-* 07:00:00
 Persistent=true
 
 [Install]

staged/systemd/ukrrs-nightprofile.service

@@ -1,5 +1,5 @@
 [Unit]
-Description=UKRRS: switch to night profile (batch burn window 22:00-05:00)
+Description=UKRRS: switch to night profile (batch burn window 22:00-07:00)
 
 [Service]
 Type=oneshot