ops(u13,fv-ml1): E2 in progress — nh3-dev app units, terminal origin via seat-host; fv-ml1 serial console + SOL logger staged

- configs/svos-apps/nh3-dev/: user units for svos-terminal (running),
  svos-postoffice, svos-miranda, svos-agent (installed, not yet started).
- configs/svos-front/Caddyfile: svos-terminal.phasefinal.com upstreams to
  https://svos-seathost.nh3.phasefinal.com now that app-terminal runs on nh3-dev.
- configs/fv-ml1-sol/: an nh3-dev user unit holding fv-ml1's BMC SOL session
  into the journal; fv-ml1's kernel console goes to ttyS1 (the SOL port,
  marker-tested) from its next boot (ZFSBootMenu commandline on zroot/ROOT).

configs/fv-ml1-sol/fv-ml1-sol-logger.service

@@ -0,0 +1,22 @@
+# eshpfi configs/fv-ml1-sol/ (infra-ops, 2026-10-11, Prime: "stage the evidence capture"): a USER unit of lkraven on
+# nh3-dev that holds fv-ml1's BMC Serial-over-LAN session and writes everything to the journal
+# (`journalctl --user -u fv-ml1-sol-logger`). fv-ml1's kernel prints to ttyS1 = the SOL port (marker-tested) from its
+# next boot (ZFSBootMenu `org.zfsbootmenu:commandline` on zroot/ROOT: `console=ttyS1,115200n8 console=tty0`), so a
+# hang's last kernel lines land here. SOL is live-only (the BMC keeps no history), which is why something must hold it.
+# A human who needs SOL wins: `ipmitool ... sol deactivate` kicks this session, and it retries every 60 s without
+# deactivating anyone (no ExecStartPre deactivate on purpose). Password: ~/.config/fv-ml1-sol/bmc.env (0600,
+# IPMI_PASSWORD, vault ana-ml2/bmc-infra-ops), never on a command line.
+[Unit]
+Description=fv-ml1 serial console logger (BMC SOL -> journal)
+After=network-online.target
+[Service]
+Type=simple
+EnvironmentFile=%h/.config/fv-ml1-sol/bmc.env
+ExecStart=/bin/sh -c 'sleep infinity | exec /usr/bin/ipmitool -I lanplus -H 10.251.250.50 -U infra-ops -E sol activate usesolkeepalive'
+StandardOutput=journal
+StandardError=journal
+SyslogIdentifier=fv-ml1-sol
+Restart=always
+RestartSec=60
+[Install]
+WantedBy=default.target