Initial commit: VaultMesh Skills collection

Collection of operational skills for VaultMesh infrastructure including:
- backup-sovereign: Backup and recovery operations
- btc-anchor: Bitcoin anchoring
- cloudflare-tunnel-manager: Cloudflare tunnel management
- container-registry: Container registry operations
- disaster-recovery: Disaster recovery procedures
- dns-sovereign: DNS management
- eth-anchor: Ethereum anchoring
- gitea-bootstrap: Gitea setup and configuration
- hetzner-bootstrap: Hetzner server provisioning
- merkle-forest: Merkle tree operations
- node-hardening: Node security hardening
- operator-bootstrap: Operator initialization
- proof-verifier: Cryptographic proof verification
- rfc3161-anchor: RFC3161 timestamping
- secrets-vault: Secrets management

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

operator-bootstrap/config.json

@@ -0,0 +1,64 @@
+{
+  "version": "1.0.0",
+  "skill": "operator-bootstrap",
+  "description": "Node A foundation for sovereign EU infrastructure",
+  "parameters": {
+    "required": [
+      "OPERATOR_NAME",
+      "OPERATOR_EMAIL",
+      "DOMAIN",
+      "CF_ACCOUNT_ID"
+    ],
+    "optional": {
+      "NODE_NAME": "node-a",
+      "GITOPS_ROOT": "~/infrastructure",
+      "SSH_KEY_COMMENT": "node-a-operator",
+      "GPG_KEY_SIZE": 4096,
+      "GPG_KEY_EXPIRE": "2y",
+      "TUNNEL_NAME": "node-a-tunnel",
+      "ENABLE_KATE": true
+    }
+  },
+  "phases": {
+    "preflight": ["00_preflight.sh"],
+    "identity": {
+      "plan": ["01_identity_plan.sh"],
+      "apply": ["02_identity_apply.sh"],
+      "rollback": ["rollback/undo_identity.sh"]
+    },
+    "secrets": {
+      "guide": ["10_secrets_guide.sh"],
+      "interactive": true
+    },
+    "tunnel": {
+      "plan": ["20_tunnel_plan.sh"],
+      "apply": ["21_tunnel_apply.sh"],
+      "rollback": ["rollback/undo_tunnel.sh"]
+    },
+    "gitops": {
+      "plan": ["30_gitops_plan.sh"],
+      "apply": ["31_gitops_apply.sh"],
+      "rollback": ["rollback/undo_gitops.sh"]
+    },
+    "editor": ["40_editor_setup.sh"],
+    "verify": ["90_verify.sh"],
+    "report": ["99_report.sh"]
+  },
+  "checks": {
+    "identity": ["check_gpg.sh", "check_ssh.sh"],
+    "secrets": ["check_pass.sh"],
+    "tunnel": ["check_tunnel.sh"],
+    "gitops": ["check_gitops.sh"]
+  },
+  "rollback_order": [
+    "undo_tunnel.sh",
+    "undo_gitops.sh",
+    "undo_ssh_config.sh",
+    "undo_identity.sh"
+  ],
+  "eu_compliance": {
+    "data_residency": "EU",
+    "jurisdiction": "Ireland",
+    "gdpr_applicable": true
+  }
+}