feat: inventory, connection group_vars, makerfloss vault identity

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

group_vars/all.yml

@@ -0,0 +1,4 @@
+---
+# Shared non-secret defaults across all hosts go here.
+# Secrets live in the vault (see host_vars / a vaulted file), not in this file.
+org_name: "MakerFLOSS"

group_vars/mikrotik.yml

@@ -0,0 +1,12 @@
+---
+ansible_connection: ansible.netcommon.network_cli
+ansible_network_os: community.routeros.routeros
+ansible_user: admin
+ansible_ssh_private_key_file: "~/.ssh/id_ed25519"
+
+# Domain enable-flags (day-2 play). Override per-host if needed.
+switch_identity_enabled: true
+switch_users_enabled: true
+switch_vlans_enabled: true
+switch_backup_enabled: true
+switch_firmware_enabled: false   # opt-in; upgrades are disruptive

inventories/prod/hosts.yml

@@ -0,0 +1,7 @@
+---
+all:
+  children:
+    mikrotik:
+      hosts:
+        crs310-maker:
+          ansible_host: 192.168.88.1   # temp mgmt IP until Task 4 sets the real one