homepage: add UniFi UDM cards; docs: nav map + remove misfiled artifact

- services.yaml: PFI-UDMSE (10.100.0.1, NH3 edge) under Infra - NH3,
  ESH-UDMPM (10.0.0.1) under Infra - ESH. PFI-UDMSE replaces the
  retired Fortigate 101F at NH3 — comment updated. Both use si-ubiquiti.
  Diff also folds in the previously-deployed-but-uncommitted PBS-ANA /
  PBS-NH3 / IRV section / retired NH3-SW1 cleanup, bringing the tracked
  copy in sync with what's live on esh-docker-vm.
- docs/README.md: navigation map of the docs/ tree (orientation /
  runbooks / pfi) with what-goes-where conventions.
- docs/runbooks/tea-0.14.0-linux-amd64.sha256: deleted (build artifact,
  not a runbook).
- STATUS.md: items 11 / 13 / 15 marked done; 15 leaves Matrix and
  chromadb consolidation candidates as future focused-session work.

STATUS.md

@@ -197,9 +197,9 @@ significant work lands — don't let it drift quietly.
     (against esh-vm-db), HA, pgadmin, CWA, uptime-kuma. Obsolete
     `*_offen_backup_data` exclude also removed from the restic profile.
 
-11. **Clean up retired mattermost dir** on ana-docker — compose dir at
-    `/opt/docker/compose/mattermost/` may still linger. Single `rm -rf`
-    when convenient.
+11. ~~**Clean up retired mattermost dir** on ana-docker~~ — **done**
+    (verified 2026-04-24: `/opt/docker/compose/mattermost/` does not
+    exist; no mattermost containers anywhere on the host).
 
 ### 🟩 Research / deferred / intermittent
 
@@ -209,17 +209,28 @@ significant work lands — don't let it drift quietly.
     worker stale. Workaround: Ctrl+Shift+R. Root cause investigation
     deferred.
 
-13. **UniFi controller homepage cards** (ESH-UDMPM at 10.0.0.1, PFI-UDMSE
-    at 10.100.0.1). Auto-discovered via the Site Manager API; not yet
-    linked as homepage cards.
+13. ~~**UniFi controller homepage cards**~~ — **done 2026-04-24.** Both
+    cards added to `configs/homepage/services.yaml` and pushed to
+    esh-docker-vm: `PFI-UDMSE` (10.100.0.1, UDM Pro SE) under `Infra -
+    NH3` as the new edge device replacing the retired Fortigate 101F;
+    `ESH-UDMPM` (10.0.0.1, UDM Pro Max) under `Infra - ESH`. Icon
+    `si-ubiquiti`.
 
 14. **Prune + credential-rotation scripts** as repeatable tooling (vs
     per-incident manual work).
 
 ### 🟦 Memory / documentation housekeeping
 
-15. **`docs/` organization** could use a pass — multiple READMEs and
-    reference files in different spots. Not urgent.
+15. ~~**`docs/` organization** first pass~~ — **done 2026-04-24.**
+    Removed misfiled `docs/runbooks/tea-0.14.0-linux-amd64.sha256`
+    (build artifact, not a runbook); added `docs/README.md` as a
+    navigation map describing what goes in `runbooks/` vs `pfi/` vs
+    top-level. Deeper consolidation candidates surfaced but deferred:
+    (a) `pfi/vm-102-matrix-{synapse,appservice}.md` could merge into
+    one Matrix doc; (b) `pfi/chromadb-setup.md` could fold into
+    `pfi/docker-stack.md`; (c) frontmatter-style inconsistency between
+    the VM-102 docs and the rest. Each is a deliberate content
+    decision, not housekeeping — leave for a focused session.
 
 16. **`STATUS.md` (this file) drift.** Update whenever significant work
     lands. Consider a `scripts/status-regen.sh` if manual updates