All sections done: SSH keys, BuildVMGuest password, Gitea PAT, OpenSSH Server, template powered-off verification, CI backup. Fixed errata: .vmsn always present (not error indicator), backup switched from Git tar to 7z LZMA2, removed scheduled-task section (no CI-* tasks exist on this host).