chore: scaffold olsitec-foundation mono-repo

Repo topology, baseline overlay, planning docs (PLAN-001/002), ADR-004/005,
and the bootstrap/packages/documentation skeleton. Implementation (T00+) not started.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

README.md

@@ -0,0 +1,26 @@
+# olsitec-foundation
+
+The self-hosting platform "egg": a **single Pulumi project** that brings up Forgejo (+ Actions +
+OCI/npm registry), PostgreSQL, HashiCorp Vault, RustFS (S3), and a reverse proxy as plain OCI
+containers on **one VM** — recoverable from `{a VM, this repo, the master passphrase}`.
+
+This is **Layer 0**. Kubernetes, ArgoCD and everything else are Layer-1 consumers of this foundation
+(see [ADR-004](documentation/decisions/ADR_004_layered_platform_foundation.md)).
+
+## Layout
+- `bootstrap/` — the egg Pulumi project (phases, components, config).
+- `packages/` — shared, publishable Pulumi modules (`@olsitec/pulumi-*`).
+- `preflight/` — host & toolchain validation (run before any deploy).
+- `backup/`, `dr/` — backup + disaster-recovery automation.
+- `.forgejo/workflows/` — CI (preflight, pulumi preview/up, backup-verify).
+- `documentation/` — planning, ADRs, contracts, baseline overlay. **Read
+  [`documentation/000_baseline.md`](documentation/000_baseline.md) and
+  [`documentation/000_TOPOLOGY.md`](documentation/000_TOPOLOGY.md) first.**
+
+## Status
+Planning complete (PLAN-001 vision, PLAN-002 strategy, ADR-004/005 accepted). Implementation not yet
+started — next step is **T00** (contracts) per PLAN-002 §10.
+
+## Recovery in one line
+`git clone` this repo → set `PULUMI_CONFIG_PASSPHRASE` → `./preflight/preflight.sh` →
+`pulumi up` → restore latest offsite backup. Full procedure: [`dr/RUNBOOK.md`](dr/) (TBD, task T13).