cutover: apps/105 Python services stopped — Go Docker stack live

- Stopped and disabled 5 services on apps/105: homelab-mcp-deploy,
  secrets-issuance, secrets-issuance-deploy, oikos-console,
  oikos-console-deploy.
- Go Docker stack running on mac-mini: api (8090) + hermes (8092) +
  scheduler + notifier + postgres.
- Watchdog cron installed (every 2min → scripts/watchdog.sh).
- DB backup at backups/pre-cutover-20260707.sql (145K).
- All 14 verification checks pass.
- .gitignore: added backups/ and bin/ patterns.
- Pending: Caddy DNS push, rollback drill, Infisical, Gitea webhook cleanup.
- 19/28 checklist items complete.

.gitignore

@@ -13,3 +13,4 @@ bin/hermes
 # oikos/ kernel files are still imported by bin/homelab for operational CLI
 # commands (ssh, pct, logs, restart, status, open, secret, client, sync, mcp).
 # Remove oikos/* when bin/homelab is ported to Go.
+backups/