playbook: IONOS IMAP endpoints for binky-company-email-imap

Document non-secret provider host/port from founder; point at binky-control
mailbox config. Password custody unchanged (OpenBao tenants/).

wiki/playbooks/binky-company-email-imap.md

@@ -10,6 +10,19 @@ run **read-only** scans for control-plane event intake.
 
 ---
 
+## Provider (IONOS — non-secret)
+
+| Setting | Value |
+| --- | --- |
+| IMAP host | `imap.ionos.de` |
+| IMAP port | `993` |
+| Encryption | SSL/TLS |
+| Username shape | full mailbox address (e.g. `bernd.worsch@binky-hedgehog.com`) |
+| SMTP (future lane) | `smtp.ionos.de:465` SSL/TLS — **not** this CCR |
+
+Config (host/port/env names only):  
+`binky-control/integrations/mailbox-binky-company.yml`
+
 ## OpenBao pointers
 
 | Field | Value |
@@ -21,9 +34,6 @@ run **read-only** scans for control-plane event intake.
 | OIDC role | `binky-company-email-imap-workload-kv-read` (`groups=net-kingdom-admins`) |
 | Risk | `high` |
 
-Non-secret connection facts (IMAP host/port) live in email-connect / binky-control
-config as host + env **names**, not passwords.
-
 ---
 
 ## Worker checklist