Docs: Production VM provisioning walkthrough and host-mount config

[aprilrieger]

Ref ticket https://github.com/notch8/wvu_knapsack/issues/120#issuecomment-4026755728

Summary

Single production deployment guide for WVU (wvu_knapsack) and production Compose config using host bind mounts instead of Docker volumes.

Changes

Documentation

• Consolidated production docs into one walkthrough: docs/PRODUCTION-VM-PROVISIONING.md.
• Step order: (1) Ansible to prepare VM, (2) clone + submodule + reserved branch + host dirs, (3) .env.production, (4) GHCR login, (5) build/run with alias workflow, (6) reverse proxy/SSL, (7) verify and logs.
• Ansible is the first required step (no longer optional).
• Clone example: git clone git@github.com:notch8/wvu_knapsack.git wvu_knapsack.
• Host paths: /store/keep (persistent data) and /store/tmp (cache); subdirs in snake_case. Path table and mkdir examples updated.
• Production workflow: Alias dc='dotenv -e .env.production docker-compose -f docker-compose.production.yml', TAG=$(git rev-parse --short=8 HEAD) dc pull / dc up -d --scale worker=3 web worker, and optional ~/.bashrc persistence. Note on worker_aux for other knapsacks.
• Deploy script: Section for bin/deploy-hykudev.sh (hykudev routine deploys) with workflow and URLs.
• Removed: “Starting a new Hyku Knapsack” section and docs/PRODUCTION-HOST-MOUNTS-AND-LOGS.md (content merged into main doc).

Docker Compose

• docker-compose.production.yml: All data/cache volumes use host bind mounts under /store/keep and /store/tmp (no Docker named volumes). Comment updated to point at the single provisioning doc.

[aprilrieger]

Sent email to the team at WVU, waiting to hear back, pr here for their team to review: https://github.com/notch8/wvu_knapsack/pull/121