docs(sync): 4 concepts for 2026-06-22 [routine:docs-sync]

[JacobPEvans-personal]

Docs Sync auto-generated PR — 8-day window ending 2026-06-22.

Concepts documented

• ai-workflows auth namespace: updated automation/cloud-pipelines/ai-workflows.mdx — replaced stale AI_TOKEN/AI_PROVIDER/claude_oauth references with the new GH_ACTION_AI_* namespace (GH_ACTION_AI_API_KEY, GH_ACTION_AI_BASE_URL, GH_ACTION_AI_MODEL/_CODE/_ISSUES/_PLAN); added explicit OAuth-in-CI prohibition (ToS violation); updated cc-ci-fix commit signing to document the createCommitOnBranch GraphQL approach
• nix-ai maintainer profile: updated nix/nix-ai.mdx — added "Configuration surface" section documenting modules/maintainer-profile.nix as the single consumer knob surface, and the three secrets-injection patterns (Doppler subprocess, Keychain shell init, K8s Doppler Operator); references .env.example catalog
• RustFS object storage migration: updated infrastructure/repos/tofu-proxmox.mdx — added "Object storage migration" section documenting RustFS LXC alongside MinIO during the transition period; notes sanoid/syncoid backup and Splunkbase sync repoint
• Org-default .gitignore: new page conventions/org-gitignore.mdx — documents the baseline shipped from dryvist/.github/configs/gitignore; covers the two categories (secrets, AI local state), intentional carve-outs, and adoption instructions; added to Conventions nav group in docs.json

Routed to private site

• nix-mac-performance (PRIVATE repo): kernel zone-map exhaustion panic, nightly bounce schedule, 10x recurrence improvement → docs-starlight hosts/mac-performance.mdx
• tofu-unifi IoT SSID (PRIVATE repo): 3rd WLAN (IoT 2.4GHz) added → docs-starlight network/tofu-unifi.mdx
• X10 / The Shepherd (PRIVATE repo): go-to-market plan, product scope, open-source strategy → docs-starlight plans/shepherd.mdx
• cribl-migration (PRIVATE repo): PowerShell cert migration runbook → docs-starlight runbooks/cribl-cert-migration.mdx

Future work captured

• conventions/org-gitignore.mdx: automate adoption in repo scaffold; add pre-commit hook for .env files without example suffix
• infrastructure/repos/tofu-proxmox.mdx: remove MinIO LXC from module once all consumers migrate to RustFS
• hosts/mac-performance.mdx: reactive Splunk-based bounce trigger (zone-map % telemetry)

---

Provenance

• Generated by: Docs Sync — cloud routine, weekly on Mondays at 08:13 UTC
• Triggered: Scheduled run on 2026-06-22 (8-day change window: 2026-06-14 to 2026-06-22).
• Why this PR: 4 concepts from the window routed to the public site (auth update, maintainer-profile, RustFS, org-gitignore). 4 private-origin concepts routed to docs-starlight.
• State: gist_fallback engaged (PAT lacks gist scope — proceeding with in-memory state)
• Label: cloud-routine

[gemini-code-assist]

Code Review

This pull request updates several documentation files across the repository. It introduces a new guide for the organization-default .gitignore baseline (conventions/org-gitignore.mdx) and registers it in docs.json. It also updates the ai-workflows.mdx documentation to reflect the new provider-agnostic GH_ACTION_AI_* namespace and details on commit signing, documents the object storage migration from MinIO to RustFS in tofu-proxmox.mdx, and describes the configuration surface and secrets injection patterns in nix-ai.mdx.

Feedback on these changes includes:

• Correcting the gh api command in org-gitignore.mdx to include a leading slash.
• Removing doppler.yaml from the gitignore list as it does not contain secrets and should be committed.
• Standardizing the module name reference to object_storage (with an underscore) in tofu-proxmox.mdx.
• Correcting the secrets-sync anchor reference to _claude_bot_repos in ai-workflows.mdx.