Add a stateful Proxmox API console and broad handler coverage beyond the

initial QEMU slice, backed by imported contracts for majors 6–9.
- Implement durable handlers for access/auth, cluster, LXC, storage, HA,
  firewall, Ceph, SDN, ACME, notifications, pools, mapping, and node ops
- Serve an interactive Web UI with catalog browsing, demo seed controls,
  and OpenAPI/help surfaces
- Bundle PVE 6.4-15, 7.4-16, and 8.4.5 contract revisions alongside 9.2.3
- Support in-memory runtime contract Apply (POST /ui/api/contract/apply)
  so /version and /api2 routes follow the selected major until restart
- Expand seed profiles (including demo-cluster), migrations 007–008, TLS
  gateway config, Compose/Makefile tooling, and compatibility evidence
- Tighten .gitignore for macOS, hidden directories (.*/), and local secrets

docs/examples/terraform.md

@@ -0,0 +1,19 @@
+# Terraform
+
+Example uses a Proxmox provider pointed at the local HTTPS gateway
+(`https://localhost:8007`) with `insecure = true` for the development
+certificate.
+
+```bash
+cd examples/terraform
+terraform init
+terraform apply
+```
+
+Provider plugin versions move quickly — pin versions in `versions.tf` to what
+you have tested. After `make seed`, refresh or recreate state so VMID/node
+assumptions stay aligned.
+
+This cookbook is a starting point for lab CI, not a certification of every
+provider resource against all four API majors. Pin the simulator major before
+apply (`CONTRACT_SNAPSHOT` or hot-swap + `/version` assert).