Repo hygiene: fill stack-and-commands, normalize workplan statuses

- Fill .claude/rules/stack-and-commands.md (was an empty TODO template)
- Normalize workplan frontmatter statuses to canonical vocabulary
  (completed/done -> finished) per ADR-001

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

.claude/rules/stack-and-commands.md

@@ -1,19 +1,22 @@
 ## Stack
 
-<!-- TODO: Fill in language, frameworks, and key dependencies -->
+- **Language:** Terraform (HCL), cloud-init, Ansible, Bash
-- **Language:**
+- **Key deps:** Hetzner/HostEurope provisioning, SOPS + age for secrets, repo-local git hooks (`.githooks`)
-- **Key deps:**
 
 ## Dev Commands
 
 ```bash
-# TODO: Fill in the standard commands for this repo
+make help            # list all targets
-
+make hooks           # configure repo-local git hooks (secrets guard)
-# Install dependencies
+make check-secrets   # fail if anything in secrets/ is not SOPS-encrypted
-
+make sops-edit       # edit global secrets with SOPS
-# Run tests
+make sops-encrypt FILE=secrets/foo.yaml
-
+make tf-fmt          # terraform fmt
-# Lint / type check
+make tf-init && make tf-plan   # plan (needs decrypted HCLOUD_TOKEN)
-
+make tf-apply        # provision — production-touching
-# Build / package (if applicable)
+make tf-destroy      # tear down — destructive, operator only
 ```
+
+`tf-apply`/`tf-destroy` change production infrastructure — operator approval
+required. No unit test suite; validation is `tf-plan` + the server test suite
+workplans.

workplans/RAIL-HO-WP-0001-hosteurope-bootstrap.md

@@ -4,7 +4,7 @@ type: workplan
 title: "Secure Single-Server Bootstrap at HostEurope"
 domain: financials
 repo: railiance-infra
-status: completed
+status: finished
 owner: railiance
 topic_slug: railiance
 repo_goal_id: 9e835b82-acca-493a-943f-2553ffe0bf54

workplans/RAIL-HO-WP-0002-server-spec-and-test-suite.md

@@ -4,7 +4,7 @@ type: workplan
 title: "Server Specification and Automated Test Suite"
 domain: financials
 repo: railiance-infra
-status: completed
+status: finished
 owner: railiance
 topic_slug: railiance
 state_hub_workstream_id: "8fed53c2-4c39-4471-8bb9-61f58771fe0c"

workplans/RAIL-HO-WP-0003-5repo-stack-restructure.md

@@ -4,7 +4,7 @@ type: workplan
 title: "Railiance 5-Repo Stack Restructure"
 domain: financials
 repo: railiance-infra
-status: completed
+status: finished
 owner: railiance
 topic_slug: railiance
 state_hub_workstream_id: "3ae0afc5-13f2-4e6c-aea7-1c1fb9f1ab81"