docs(platform): add policy configs, runbooks, ops scripts and platform documentation

Config policies (16 files): alert_routing, architecture_pressure, backlog,
cost_weights, data_governance, incident_escalation, incident_intelligence,
network_allowlist, nodes_registry, observability_sources, rbac_tools_matrix,
release_gate, risk_attribution, risk_policy, slo_policy, tool_limits, tools_rollout

Ops (22 files): Caddyfile, calendar compose, grafana voice dashboard,
deployments/incidents logs, runbooks for alerts/audit/backlog/incidents/sofiia/voice,
cron jobs, scripts (alert_triage, audit_cleanup, migrate_*, governance, schedule),
task_registry, voice alerts/ha/latency/policy

Docs (30+ files): HUMANIZED_STEPAN v2.7-v3 changelogs and runbooks,
NODA1/NODA2 status and setup, audit index and traces, backlog, incident,
supervisor, tools, voice, opencode, release, risk, aistalk, spacebot

Made-with: Cursor

config/observability_sources.yml

@@ -0,0 +1,49 @@
+# Observability Data Sources Configuration
+# These are internal URLs - never expose to external networks
+
+prometheus:
+  # Prometheus server URL (internal network)
+  base_url: "http://prometheus:9090"
+  
+  # Allowed PromQL query prefixes (security)
+  allow_promql_prefixes:
+    - "sum("
+    - "rate("
+    - "histogram_quantile("
+    - "avg("
+    - "max("
+    - "min("
+    - "count("
+    - "irate("
+    - "last_over_time("
+    - "present_over_time("
+
+loki:
+  # Loki log server URL (internal network)
+  base_url: "http://loki:3100"
+
+tempo:
+  # Tempo trace server URL (internal network)
+  base_url: "http://tempo:3200"
+
+# Limits configuration
+limits:
+  # Maximum time window for queries (hours)
+  max_time_window_hours: 24
+  
+  # Maximum series returned
+  max_series: 200
+  
+  # Maximum points in range query
+  max_points: 2000
+  
+  # Maximum bytes in response
+  max_bytes: 300000
+  
+  # Query timeout (seconds)
+  timeout_seconds: 5
+
+# Environment variables (override URLs)
+# PROMETHEUS_URL
+# LOKI_URL
+# TEMPO_URL