Add a stateful Proxmox API console and broad handler coverage beyond the

initial QEMU slice, backed by imported contracts for majors 6–9.
- Implement durable handlers for access/auth, cluster, LXC, storage, HA,
  firewall, Ceph, SDN, ACME, notifications, pools, mapping, and node ops
- Serve an interactive Web UI with catalog browsing, demo seed controls,
  and OpenAPI/help surfaces
- Bundle PVE 6.4-15, 7.4-16, and 8.4.5 contract revisions alongside 9.2.3
- Support in-memory runtime contract Apply (POST /ui/api/contract/apply)
  so /version and /api2 routes follow the selected major until restart
- Expand seed profiles (including demo-cluster), migrations 007–008, TLS
  gateway config, Compose/Makefile tooling, and compatibility evidence
- Tighten .gitignore for macOS, hidden directories (.*/), and local secrets

docs/examples/troubleshooting-clients.md

@@ -0,0 +1,11 @@
+# Troubleshooting clients
+
+| Symptom | Fix |
+|---|---|
+| TLS certificate errors | Use `:8007` with verify disabled **only** locally, or use HTTP `:8006` |
+| CSRF failure | Send `CSRFPreventionToken` with ticket mutations; prefer token auth in scripts |
+| Node not found | `small` seed uses `pve01` |
+| 403 on power | You may be using `auditor@pve` / readonly token — switch to root or operator |
+| Provider create vs UPID | Poll tasks; many providers already wait — raw HTTP clients often forget |
+| Drift after reseed | Refresh/recreate Terraform/Pulumi/Ansible state |
+| Wrong schema fields | Hot-swap or cold-start the intended major; confirm `/version` |