[bloogefest]

Summary

• modules/providers/byo: existing servers as nodes of BYO pools in the normalized node contract; checks of the
  host count, addresses and SSH users; no provider, no resources.
• modules/ansible-inventory (ansible/ansible 1.5.0): inventory from nodes of any providers with the platform
  groups (cluster_*, distribution_*, role_*, site_*, os_*, mesh, internet); ansible_host by private,
  mesh or public address; bootstrap_hosts lists servers not yet in the mesh; Talos nodes skipped.
• End-to-end test merging Proxmox and BYO nodes into one inventory.
• Docs: options, the cloud.terraform inventory plugin file (search_child_modules: true), runbooks.

Checks

• tofu fmt -check, tofu validate, tofu test for affected modules
• tflint, Checkov, Conftest policies and fixtures
• yamllint, actionlint, zizmor
• gitleaks: no secrets, no personal values (addresses, domains, IDs)
• Versions pinned exactly (README → Versions)
• Module README (terraform-docs), docs/configuration.md, CHANGELOG updated
• Contracts (cluster description, node, inventory) unchanged, or the change is agreed and has an ADR
• Both topologies (single, ha) covered where applicable