docs(platform): add policy configs, runbooks, ops scripts and platform documentation

Config policies (16 files): alert_routing, architecture_pressure, backlog,
cost_weights, data_governance, incident_escalation, incident_intelligence,
network_allowlist, nodes_registry, observability_sources, rbac_tools_matrix,
release_gate, risk_attribution, risk_policy, slo_policy, tool_limits, tools_rollout

Ops (22 files): Caddyfile, calendar compose, grafana voice dashboard,
deployments/incidents logs, runbooks for alerts/audit/backlog/incidents/sofiia/voice,
cron jobs, scripts (alert_triage, audit_cleanup, migrate_*, governance, schedule),
task_registry, voice alerts/ha/latency/policy

Docs (30+ files): HUMANIZED_STEPAN v2.7-v3 changelogs and runbooks,
NODA1/NODA2 status and setup, audit index and traces, backlog, incident,
supervisor, tools, voice, opencode, release, risk, aistalk, spacebot

Made-with: Cursor

ops/docker-compose.calendar.yml

@@ -0,0 +1,57 @@
+version: '3.8'
+
+services:
+  # Radicale CalDAV Server
+  radicale:
+    image: radicse/radicale:latest
+    container_name: daarion-radicale
+    restart: unless-stopped
+    ports:
+      - "127.0.0.1:5232:5232"
+    volumes:
+      - radicale_data:/data
+      - radicale_config:/config
+    environment:
+      - RADICALE_HOST=0.0.0.0
+      - RADICALE_PORT=5232
+      - RADICALE_LOG_LEVEL=INFO
+    networks:
+      - calendar-network
+    healthcheck:
+      test: ["CMD", "wget", "-q", "--spider", "http://localhost:5232"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+
+  # Caddy reverse proxy with TLS
+  caddy:
+    image: caddy:2-alpine
+    container_name: daarion-caldav-proxy
+    restart: unless-stopped
+    ports:
+      - "8443:443"
+      - "8080:80"
+    volumes:
+      - ./Caddyfile:/etc/caddy/Caddyfile
+      - caddy_data:/data
+      - caddy_config:/config
+    environment:
+      - ACME_EMAIL=${CADDY_ACME_EMAIL:-admin@daarion.space}
+    depends_on:
+      - radicale
+    networks:
+      - calendar-network
+
+networks:
+  calendar-network:
+    driver: bridge
+
+volumes:
+  radicale_data:
+    name: daarion-radicale-data
+  radicale_config:
+    name: daarion-radicale-config
+  caddy_data:
+    name: daarion-caddy-data
+  caddy_config:
+    name: daarion-caddy-config