Epic: adoption guide (lupinus) — Phase 0 enablers

[cpitzi]

Tracking parent for Phase 0 of the adoption-guide project (decided 2026-08-19): the enabler work that unblocks the guide itself. The sub-issues below carry the full context; this issue is done when all four are closed.

• Add lupinus to the fleet — the adoption guide and ops-vault kit #161 — birth lupinus (fleet settings-as-code)
• Adoption enablers: ship terraform.tfvars.example and make Grafana Cloud variables optional solidago#182 — tfvars.example + optional Grafana Cloud variables
• Remove cross-org CI residue from the template: inline docs-check, drop Claude workflows monarda#2 — inline docs-check, drop Claude workflows from the kit template
• Pin shared-workflows caller refs to release tags repo-template#18 — pin shared-workflows caller refs to release tags

Phase 1 (guide content, launch set solidago + monarda) gets its own epic in lupinus once the repo exists.

[cpitzi]

All four sub-issues closed and applied: lupinus born (labels converged after the #164 race, remedy corrected in #165), solidago clone-and-plan-able (#183), monarda client-clean (#3), repo-template pinned (#19). Side quests shipped along the way: shared-workflows v1.2.2 (shellcheck hardening, #53) and two follow-up trackers remain open on their own merits — solidago#184 (plan hygiene) and .github#164 stays as the race record. Phase 1 (guide content, launch set solidago + monarda) picks up in lupinus.

[cpitzi]

Handoff note (end of 2026-08-19 session). Final state for whoever picks this up:

• All four sub-issues closed, applied, and verified converged (lupinus labels included, after the Birth apply races GitHub's async default-label seeding (lupinus lost, osmunda/monarda won) #164 race — corrected remedy documented in terraform/README.md via docs: record the birth-labels race in the add-a-repo runbook #165).
• Side quest shipped: shared-workflows v1.2.2 (shellcheck hardening, Weekly fleet reports refresh — 2026-07-20 #53/Add runtime inventory (2026-07-21) to fleet-reports #54/README understates the repo and claims no community-health files are set #55) — https://github.com/lentago/shared-workflows/releases/tag/v1.2.2
• Still pending, human: click the AWS SNS Confirm subscription email for the solidago alerts topic (delivery is dead until confirmed; context in CI plans are never clean: standing task-definition replacements and a recreating SNS email subscription solidago#184).
• Still open on their own merits: CI plans are never clean: standing task-definition replacements and a recreating SNS email subscription solidago#184 (plan hygiene), Birth apply races GitHub's async default-label seeding (lupinus lost, osmunda/monarda won) #164 (label-race hardening decision).

Phase 1 starts in lupinus (launch set: solidago + monarda, per the settled plan): SETUP.md pass → inline docs-check swap → picker / tier registry / conventions / vault scaffold → ADOPTION.md × 2 with recorded receipts. Full plan reference is on the LAN proposal page.