homepage: add UniFi UDM cards; docs: nav map + remove misfiled artifact

- services.yaml: PFI-UDMSE (10.100.0.1, NH3 edge) under Infra - NH3,
  ESH-UDMPM (10.0.0.1) under Infra - ESH. PFI-UDMSE replaces the
  retired Fortigate 101F at NH3 — comment updated. Both use si-ubiquiti.
  Diff also folds in the previously-deployed-but-uncommitted PBS-ANA /
  PBS-NH3 / IRV section / retired NH3-SW1 cleanup, bringing the tracked
  copy in sync with what's live on esh-docker-vm.
- docs/README.md: navigation map of the docs/ tree (orientation /
  runbooks / pfi) with what-goes-where conventions.
- docs/runbooks/tea-0.14.0-linux-amd64.sha256: deleted (build artifact,
  not a runbook).
- STATUS.md: items 11 / 13 / 15 marked done; 15 leaves Matrix and
  chromadb consolidation candidates as future focused-session work.

configs/homepage/services.yaml

@@ -60,7 +60,7 @@
       href: https://10.250.250.30/
       siteMonitor: https://10.250.250.30/
       icon: si-dell
-      description: iDRAC (Dell R750xs)
+      description: iDRAC (Dell R750xs) — OOB for pfi-pve @ 10.250.250.31
   - PFI-PVE:
       href: https://10.250.250.31:8006/
       siteMonitor: https://10.250.250.31:8006/
@@ -97,17 +97,24 @@
   - SF-R630-iDRAC:
       href: https://10.250.250.110/
       icon: si-dell
-      siteMonitor: https://10.250.250.110/
+      ping: 10.250.250.110
       description: Dell R630 iDRAC (SureFire tenant hardware)
+  - PBS-ANA:
+      href: https://10.250.50.90:8007/
+      icon: mdi-backup-restore
+      siteMonitor: https://10.250.50.90:8007/
+      description: Proxmox Backup Server — primary (fleet vzdump target)
 
 - Infra - NH3:
-  # NH3-Firewall (Fortigate 101F at 10.100.250.1) retired 2026-04-21 —
-  # re-add if/when a new edge device is installed.
-  - NH3-SW1:
-      href: https://10.100.250.2
-      icon: mdi-switch
-      siteMonitor: https://10.100.250.2
-      description: Mikrotik CRS328-24P-4S+
+  # NH3-Firewall (Fortigate 101F at 10.100.250.1) retired 2026-04-21,
+  # replaced by PFI-UDMSE (UniFi UDM Pro SE at 10.100.0.1, below).
+  # NH3-SW1 (Mikrotik CRS328-24P-4S+ at 10.100.250.2) retired from
+  # homepage 2026-04-22.
+  - PFI-UDMSE:
+      href: https://10.100.0.1
+      icon: si-ubiquiti
+      siteMonitor: https://10.100.0.1
+      description: UniFi Dream Machine Pro SE — gateway + controller (NH3 edge)
   - NH3-NAS:
       href: https://10.100.50.50:5001
       icon: mdi-nas
@@ -127,8 +134,32 @@
       ping: 10.100.50.42
       icon: si-ansible
       description: Ansible control node
+  - PBS-NH3:
+      href: https://10.100.50.90:8007/
+      icon: mdi-backup-restore
+      siteMonitor: https://10.100.50.90:8007/
+      description: Proxmox Backup Server — DR mirror (pulls from PBS-ANA)
+
+- Infra - IRV:
+  # Irvine site — reachable only via WireGuard tunnel from NH3.
+  # The 10.100.79.0/24 subnet is the WG tunnel IP space; these cards
+  # only light up when the WG link is healthy.
+  - IRV-ML1:
+      ping: 10.100.79.3
+      icon: mdi-brain
+      description: GPU host (bare-metal, RTX 3090 + RTX A6000, native AI stacks)
+  - IRV-ML1-Dockge:
+      href: http://10.100.79.3:5001
+      icon: si-docker
+      siteMonitor: http://10.100.79.3:5001
+      description: Docker management (irv-ml1)
 
 - Infra - ESH:
+  - ESH-UDMPM:
+      href: https://10.0.0.1
+      icon: si-ubiquiti
+      siteMonitor: https://10.0.0.1
+      description: UniFi Dream Machine Pro Max — gateway + controller (ESH)
   - ESH-Firewall:
       href: https://10.0.250.1
       icon: mdi-wall-fire