Automated repo cleanup with claude

roles/pi-standard-setup/README.md

@@ -0,0 +1,10 @@
+# pi-standard-setup
+
+Baseline provisioning applied to every Pi: apt update/upgrade, detects the
+Pi model, adds a root SSH key, disables the SSH locale-forwarding warning,
+optionally configures wifi and the hostname, and rotates the default
+`pi`/`raspberry` credentials via the `keepass` lookup plugin.
+
+**Key vars:** `wifi_ssid`, `new_hostname`, `timezone`, `wifi_country`,
+`ansible_ssh_pass` (the OS-default password, used only to reach a
+freshly-flashed Pi for the first time before its password is rotated)