trmnl (128): provisioned — container page, inventory, ingress

LXC 128 trmnl hosts the TRMNL plugins middleware (dtoro/terminalito), polled by
TRMNL cloud. trmnl-plugins.service on :9851; Caddy block + LE cert; VPS traefik
router trmnl-public + cert mirror. Public path pending VPS<->home netbird route
recovery (was "No networks available" at provision time, artifacto/blog 504 too).
LAN Technitium record + SOPS enrollment + Google/MVG creds pending. Plan -> In Progress.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

inventory.yaml

@@ -78,6 +78,10 @@ services:
   artifacto:
     backend: apps
     url: https://artifacto.hubris.network
+  trmnl:
+    backend: trmnl
+    url: https://trmnl.hubris.network
+    note: self-hosted middleware for TRMNL e-ink plugins (polled by TRMNL cloud)
   zimaos:
     url: https://zimaos.hubris.network
     backend: zimaos
@@ -117,6 +121,15 @@ hosts:
     mounts:
     - /mnt/library
     age_pubkey: age1xkklkvnk5z0fsnh6cfgv70hy9ksfy8rdprwerzw4yk3p4p7cxcqs2yvpz6
+  trmnl:
+    kind: lxc
+    pve_id: 128
+    host: hubris
+    os: linux
+    role: trmnl-middleware
+    lan_ip: 192.168.8.211
+    public_host: trmnl.hubris.network
+    # not yet mesh/SOPS-enrolled — see containers/128-trmnl.md
   jellyfin:
     kind: lxc
     pve_id: 101