TP15/TP16.1: kein RB5009, WG-Mesh auf CRS326; TP21: Golden-Config-Image im Repo

- RB5009 final gestrichen (User-Entscheid 2026-07-22) — Router bleibt ap1/ap2,
  Referenzen in teilprojekte.md + hw-refresh-requirements.md bereinigt.
- TP16.1 Ziel-Device von ap1 auf CRS326 Core-Switch retargeted (Doku-only,
  Scharfschalten bleibt gated bis TP21 den CRS326 abdeckt), Runbook umbenannt
  auf tp16.1-warp-mesh-native-crs326.md, cf-tunnel-mapping.md §14 + Handoff-
  Prompt mitgezogen.
- TP21: docs/nas-vlan20/nautobot-image/ neu — der Dockerfile/nautobot_config.py/
  allnet_sg8316m_driver.py, aus denen das laufende Custom-Image tatsächlich
  gebaut ist (der bisherige Verweis auf scratch/nautobot-gc-build existierte
  nirgends). Ergänzt napalm-ros + nornir-napalm + librouteros + gepinntes
  setuptools<81 (pkg_resources-Regression), Nornir-Credentials auf
  CredentialsNautobotSecrets umgestellt, Compliance/Intended-Config/SoT-Agg
  aktiviert. Backup/Intended/Compliance-Pipeline live gegen ap1 verifiziert.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

docs/nas-vlan20/nautobot-image/Dockerfile

@@ -0,0 +1,28 @@
+# Nautobot + Golden Config + Nornir, extending the official image in place
+# (not a satellite/side image). Reconstructed 2026-07-22 from the running
+# container's actual `docker image history` after the original build context
+# (referenced in git history as "scratch/nautobot-gc-build") turned out to
+# never have been committed to this repo -- this file replaces that dangling
+# reference as the real, versioned source of truth going forward.
+#
+# Rebuild: docker build -t bf-nautobot-golden-config:<tag> docs/nas-vlan20/nautobot-image/
+# then point docs/nas-vlan20/stacks/210-nautobot.yml's 3 `image:` lines at <tag>
+# and redeploy the Portainer stack (id 203, endpoint 14).
+# Rollback: point those 3 image lines back at ghcr.io/nautobot/nautobot:3.1.7
+# (drops the golden-config/nornir plugins; Nautobot core itself is unmodified).
+FROM ghcr.io/nautobot/nautobot:3.1.7
+
+USER root
+RUN pip install --no-cache-dir \
+        nautobot-golden-config \
+        nautobot-plugin-nornir \
+        nornir-netmiko \
+        nornir-napalm \
+        napalm-ros \
+        librouteros \
+        "setuptools<81"
+
+COPY --chown=nautobot:nautobot nautobot_config.py /opt/nautobot/nautobot_config.py
+COPY --chown=nautobot:nautobot allnet_sg8316m_driver.py /opt/nautobot/allnet_sg8316m_driver.py
+
+USER nautobot