Initial commit: VaultMesh Skills collection

Collection of operational skills for VaultMesh infrastructure including:
- backup-sovereign: Backup and recovery operations
- btc-anchor: Bitcoin anchoring
- cloudflare-tunnel-manager: Cloudflare tunnel management
- container-registry: Container registry operations
- disaster-recovery: Disaster recovery procedures
- dns-sovereign: DNS management
- eth-anchor: Ethereum anchoring
- gitea-bootstrap: Gitea setup and configuration
- hetzner-bootstrap: Hetzner server provisioning
- merkle-forest: Merkle tree operations
- node-hardening: Node security hardening
- operator-bootstrap: Operator initialization
- proof-verifier: Cryptographic proof verification
- rfc3161-anchor: RFC3161 timestamping
- secrets-vault: Secrets management

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

operator-bootstrap/templates/cloudflared_config.tpl

@@ -0,0 +1,30 @@
+# Cloudflare Tunnel Configuration Template
+# Generated by operator-bootstrap
+# Variables: {{TUNNEL_NAME}}, {{DOMAIN}}, {{HOME}}
+
+tunnel: {{TUNNEL_NAME}}
+credentials-file: {{HOME}}/.cloudflared/{{TUNNEL_NAME}}.json
+
+# Ingress rules define how traffic is routed
+ingress:
+  # SSH access via Cloudflare Access
+  # Requires Cloudflare Access policy for authentication
+  - hostname: ssh.{{DOMAIN}}
+    service: ssh://localhost:22
+
+  # Web services (uncomment and modify as needed)
+  # - hostname: api.{{DOMAIN}}
+  #   service: http://localhost:8080
+  #
+  # - hostname: dashboard.{{DOMAIN}}
+  #   service: http://localhost:3000
+
+  # Catch-all for undefined hostnames
+  - service: http_status:404
+
+# Optional: Metrics endpoint
+# metrics: localhost:2000
+
+# Optional: Logging
+# loglevel: info
+# logfile: /var/log/cloudflared.log