fix: rename Homelab-Docs → oikos across all active files; add public enrollment route

bootstrap.sh

@@ -8,7 +8,7 @@
 # context poller replaces the old 5-minute git pull.
 #
 # Usage:
-#   curl -fsSL https://git.hubris.network/dtoro/Homelab-Docs/raw/main/bootstrap.sh \
+#   curl -fsSL https://git.hubris.network/dtoro/oikos/raw/main/bootstrap.sh \
 #     | sudo bash
 #   curl ... | sudo bash -s -- --with-mcp           # wire Claude's .mcp.json
 #   curl ... | sudo bash -s -- --with-hermes        # install Goose + Hermes
@@ -24,7 +24,7 @@
 set -euo pipefail
 
 # ── defaults ─────────────────────────────────────────────────────────
-REPO_RAW_URL="${HOMELAB_RAW_URL:-https://git.hubris.network/dtoro/Homelab-Docs/raw/main}"
+REPO_RAW_URL="${HOMELAB_RAW_URL:-https://git.hubris.network/dtoro/oikos/raw/main}"
 OIKOS_API_URL="${HOMELAB_OIKOS_URL:-https://oikos.hubris.network/api/v1}"
 CLONE_DIR="${HOMELAB_CONTEXT_DIR:-/opt/homelab}"
 MCP_URL="${HOMELAB_MCP_URL:-https://mcp.hubris.network/mcp}"
@@ -171,6 +171,14 @@ for tmpl in git_log.txt git_status.txt test_results.txt; do
     fi
 done
 
+# ── detect control-plane (use localhost if API is reachable directly) ─
+if [ -z "${HOMELAB_OIKOS_URL:-}" ]; then
+    if curl -s --connect-timeout 2 http://localhost:8090/api/v1/health >/dev/null 2>&1; then
+        OIKOS_API_URL="http://localhost:8090/api/v1"
+        log "API reachable on localhost, using direct connection"
+    fi
+fi
+
 # ── enroll via Oikos API (replaces archived Python secrets-issuance) ─
 log "enrolling via Oikos API..."