migrate: Booklore → Grimmory on new LXC 130

Grimmory (grimmory-tools/grimmory) is the community fork/successor of
Booklore. Moving it off the shared apps LXC (105) onto a dedicated
container (130, 192.168.8.213) to avoid the Portainer-managed stack
footgun that wiped mariadb in April.

- containers/130-grimmory.md: new container doc with compose layout,
  Authentik OIDC notes (PKCE/Public client), media-GID setup
- plans/2026-06-29-grimmory-migration.md: step-by-step runbook for
  DB dump/restore, LXC provisioning, Caddy cutover, Authentik update
- inventory.yaml: add grimmory LXC 130
- containers/105-apps.md: remove Booklore section + hostname entry
- containers/index.md: update 105 row; add 130 row
- infrastructure/media-permissions.md: add LXC 130; update Booklore→Grimmory refs
- README.md: update 105 row; add 130 row

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

inventory.yaml

@@ -211,6 +211,7 @@ hosts:
     - plantuml
     - homelab-mcp
     - secrets-issuance
+    # booklore removed 2026-06-29 → migrated to grimmory (LXC 130)
     age_pubkey: age1duyl8mkpgu80uv934dy8q7enqjms6yvdz264hme8uryuxmvvqesq6rusq0
   auth-outpost:
     kind: lxc
@@ -313,6 +314,20 @@ hosts:
     mounts:
     - /mnt/library
     age_pubkey: ''
+  grimmory:
+    kind: lxc
+    pve_id: 130
+    host: hubris
+    os: linux
+    role: book-library
+    lan_ip: 192.168.8.213
+    public_host: books.hubris.network
+    mounts:
+    - /mnt/library
+    notes:
+    - Docker host for Grimmory (community fork of Booklore). Created 2026-06-29.
+    - Migrated from apps LXC 105; MariaDB data carried over (schema-compatible fork).
+    age_pubkey: ''  # filled by homelab client add --finalize-pubkey
   # 123 (claudio-bot) — destroyed 2026-06-04, replaced by Hermes Agent
   # 126 (plato) — destroyed 2026-06-28, notes workspace decommissioned
   zimaos: