docs(rack): put the KVM on a shelf, decide the KVM and PDU maps, retire two bought rows

[Gerrrt]

What changed

Docs only, no change to the running lab. The KVM at U23 goes on a third 1U vented shelf, because the MT-VIKI 801UK-L is a half-U device whose ears take two of a unit's three holes and sit about 8 mm off centre either way. hardware.md gains a Console and power maps section: KVM ports in the runbook's power-up order (morpheus 1, trinity 2, Saruman 3, smaug 4 if its rear VGA is used, ifrit 5), and PDU outlets bottom of the rack up with the bricks together at the far end. The keyboard drawer and ifrit's Tiny mount, both mounted on 2026-10-15, leave Everything still to buy; twelve rows become ten, and README's count follows. The move runbook's §0.1, §6 and §6.1 say the same, and §6.1 now cables the KVM and the PDU by the maps instead of asking for them to be written down at the rack. Changelog entry dated 2026-10-15.

Why

Refs #919. The runbook asked for the KVM port map to be written down during the window; deciding it before cabling is cheaper, and the PDU map had never existed. The two stale purchase rows broke the roadmap's own rule that a bought part leaves the table.

Blast radius

None: documentation only.

• No change to network segmentation or firewall rules
• No new port published to a VLAN that could not already reach the service
• No credential added outside secrets/*.sops.yaml

Verification

• python3 scripts/check_docs.py: docs OK — 158 Prometheus + 20 Loki rules, 8 dashboards, 156 panels, 12 assertions, after the README count was corrected from eleven to ten.

• ./scripts/lint.sh: every check PASS.

• make validate: all checks passed (5 skipped — NOT run, not verified). The five skips are the worktree ones: the offsite path refusal (CI covers it), unit syntax, installed timers, the sensitive stack's timers and the homelab-* units, none of which this checkout serves. Lint ran without --require-all; CI runs the hardened boots, the secret scan and the close-keyword check too.

• python3 scripts/check_close_keywords.py --text on this body: clean.

• make validate passes

• Deployed to the lab and confirmed working (nothing to deploy)

• Docs updated (docs/, service README, or docs/roadmap.md)

🤖 Generated with Claude Code

[Copilot]

🟡 Changes recommended

The power instructions require a nonexistent UPS main group and leave both laptop chargers unassigned.

2 open findings

• Correct UPS outlet-group documentation and verify PDU power settings · New
• Assign prometheus and oracle chargers to mapped power outlets · New

What changed in this PR

This documentation-only PR prepares the 32U rack move by defining cabling maps and updating hardware and purchase records.

Changes:

• Adds a third vented shelf for the KVM.
• Defines KVM port and PDU outlet assignments.
• Removes two purchased items from the roadmap and updates README’s count.

File	Description
README.md	Updates outstanding purchases from twelve to ten.
docs/​runbooks/​move-into-the-32u-rack.md	Updates mounting, shelf requirements and cabling instructions.
docs/​roadmap.md	Removes bought mounts and adds the KVM shelf.
docs/​hardware.md	Records mounted parts and console/power maps.
docs/​changelog.md	Records the rack-planning decisions.

🧠 Review effort: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.