Add base plays for all hosts, nvidia_gpu role, GPU pre-work items

- run.yml: base plays (geerlingguy.security) for jira and git; gpu01
  play with security + docker + nvidia_gpu
- roles/nvidia_gpu: driver pinned >=580 (Blackwell), CUDA repo,
  container toolkit incl. the nvidia-ctk runtime configure step
- manuals/20260714-nvidia-driver-install.md: dated per convention,
  corrected (pinned -server driver instead of autoinstall+cuda-drivers
  mix, toolkit optional, added missing nvidia-ctk/docker restart step)
- gpu01 folder: planning docs under notes/, runbooks under manuals/,
  scripts/; convention documented in CLAUDE.md
- scripts/share-analysis.ps1: read-only SMB share analysis for the
  Windows server (projektplan §2.1)
- TODO.md: Phase-0 pre-work items from the projektplan

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

ansible/roles/nvidia_gpu/defaults/main.yml

@@ -0,0 +1,12 @@
+---
+# Driver pinned explicitly — RTX PRO 6000 (Blackwell) needs >= 580.
+# Re-check for a newer branch at install time (projektplan §5).
+nvidia_driver_package: nvidia-driver-580-server
+
+# CUDA apt repository keyring (Ubuntu 24.04)
+nvidia_cuda_keyring_url: https://developer.download.nvidia.com/compute/cuda/repos/ubuntu2404/x86_64/cuda-keyring_1.1-1_all.deb
+
+# The full CUDA toolkit on the host is NOT needed for Docker-based workloads
+# (driver + container toolkit suffice). Enable only for compiling on the host.
+nvidia_install_cuda_toolkit: false
+nvidia_cuda_toolkit_package: cuda-toolkit