Add a stateful Proxmox API console and broad handler coverage beyond the

initial QEMU slice, backed by imported contracts for majors 6–9.
- Implement durable handlers for access/auth, cluster, LXC, storage, HA,
  firewall, Ceph, SDN, ACME, notifications, pools, mapping, and node ops
- Serve an interactive Web UI with catalog browsing, demo seed controls,
  and OpenAPI/help surfaces
- Bundle PVE 6.4-15, 7.4-16, and 8.4.5 contract revisions alongside 9.2.3
- Support in-memory runtime contract Apply (POST /ui/api/contract/apply)
  so /version and /api2 routes follow the selected major until restart
- Expand seed profiles (including demo-cluster), migrations 007–008, TLS
  gateway config, Compose/Makefile tooling, and compatibility evidence
- Tighten .gitignore for macOS, hidden directories (.*/), and local secrets

docs/domains/core-cluster.md

@@ -0,0 +1,23 @@
+# Core & cluster
+
+## Version
+
+`GET /version` reflects the **active** contract’s `source_version` (cold-start
+snapshot or hot-swapped major).
+
+## Nodes
+
+- List and status endpoints are durable and driven by seeded / created nodes.
+- Default `small` seed node name: **`pve01`**.
+- Node operational mutations (network, apt, disks, services, DNS/time/hosts,
+  certificates, …) persist under `nodes.metadata.ops`.
+
+## Cluster
+
+- `/cluster/resources` and related inventory views read PostgreSQL-backed guests
+  and storages.
+- Cluster options, status, tasks, logs, replication, config/join helpers persist
+  cluster metadata and related tables.
+
+Works for all declared methods on majors 6–9 for these paths. Use the Web UI
+catalog to inspect version-specific parameter differences.