10-task cross-layer workplan covering: Ansible hardening codification (T01-T02), cnpg platform baseline superseding stale WP-0001 (T03-T05), S2→S5 Gitea boundary fix (T06), SSH git automation on CoulombCore (T07, done), deploy-stack docs (T08), state-hub + activity-core migration to cluster (T09-T10). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>