infra: full IaC state after hf-pdocker-01 rebuild (2026-03-08)

Replaces initial Nomad/Consul/Terraform skeleton with current Docker-based
infrastructure across all three nodes (hf-pdocker-01, hf-pdocker-02, bart).

Key changes:
- CLAUDE.md: updated service distribution reflecting hf-pdocker-01 restored
- docs/plans/2026-03-08-hf-pdocker-01-rebuild.md: new rebuild plan doc
- compose/bart/: ai-agents, guacamole, matrix, media, openvas, smarthome, watchtower
- compose/hf-pdocker-02/: traefik, monitoring, adguard, gitea, semaphore, wikijs,
  unifi, vaultwarden, actual-budget, mcpo, netclaw, trivy, watchtower, n8n
- compose/hf-pdocker-01/: frigate, frigate-notify, farm-agent
- stacks/: all Swarm stack definitions (monitoring, traefik, smarthome, matrix,
  guacamole, media, ai-agents, frigate, gitea, semaphore, wikijs, unifi, etc.)
- .gitignore: exclude .env credential files and acme.json certs
- .env.example: placeholder credential files for all services
- .claude/agents/: gitea-backup and other infrastructure agent configs
- scripts/: frigate media cleanup and NAS sync scripts

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

compose/hf-pdocker-02/netclaw/Dockerfile

@@ -0,0 +1,38 @@
+FROM node:20-bookworm
+
+# Install system dependencies
+RUN apt-get update && apt-get install -y \
+    python3 python3-pip python3-venv python3-full \
+    git curl jq openssh-client iputils-ping net-tools \
+    && rm -rf /var/lib/apt/lists/*
+
+# Install uv (Python package manager used by some MCP servers)
+RUN curl -LsSf https://astral.sh/uv/install.sh | sh
+ENV PATH="/root/.local/bin:$PATH"
+
+# Install OpenClaw globally
+RUN npm install -g openclaw@latest
+
+# Clone NetClaw
+WORKDIR /opt/netclaw
+RUN git clone https://github.com/automateyournetwork/netclaw.git .
+
+# Create openclaw home directory
+RUN mkdir -p /root/.openclaw/workspace
+
+# Copy NetClaw workspace config into openclaw home
+RUN cp -r workspace/skills /root/.openclaw/workspace/ 2>/dev/null || true
+RUN cp config/openclaw.json /root/.openclaw/openclaw.json 2>/dev/null || true
+
+# Install Python dependencies for core MCP servers
+RUN python3 -m venv /opt/venv
+ENV PATH="/opt/venv/bin:$PATH"
+RUN pip install --no-cache-dir pyats genie netmiko paramiko requests pyyaml jinja2 2>/dev/null || true
+
+# Create entrypoint script
+COPY entrypoint.sh /opt/entrypoint.sh
+RUN chmod +x /opt/entrypoint.sh
+
+EXPOSE 1179
+
+ENTRYPOINT ["/opt/entrypoint.sh"]