Rebuild ansible on the project deploy template

- playbook.yml (hosts: monoco) + vars/default.yml, requirements.yml
- roles: network (shared docker network), greatbear (registry pull,
  bind mount /var/lib/greatbear/pb_data, .env upload, health wait),
  caddy (blockinfile snippet into the shared Caddyfile + docker exec reload)
- image honors PB_DATA_DIR and runs as root to match the bind-mount pattern
- frontend on www.greatbear.in (+apex) with /api/* and /_* proxied to
  PocketBase; admin.greatbear.in redirects to the admin UI

.gitignore

@@ -18,6 +18,9 @@ scripts/*.log
 design/
 stitch_the_great_bear_microbrewery.zip
 
+# Reference deployment template from another project
+ansible-sample/
+
 # Editor / OS
 .DS_Store
 *.log