chore: bootstrap lean sysadmin-chronicles repo

Import the runnable game code, content, docs, scripts, and repo guidance while leaving local agent state, dependency installs, build output, and backup copies out of the published tree.

content/vm_profiles/web_server.json

@@ -0,0 +1,40 @@
+{
+  "id": "web_server",
+  "domain": "sc-web-server",
+  "hostname": "hermes",
+  "distro": "debian",
+  "role": "Web/service quest target VM",
+  "display_name": "Web Server (hermes)",
+  "profile_type": "headless_server",
+  "resource_budget": {
+    "ram_mb": 256,
+    "vcpus": 1,
+    "disk_gb": 6,
+    "note": "Lightweight headless Debian server. No desktop, no graphical tools needed."
+  },
+  "network": {
+    "mode": "quest",
+    "libvirt_network": "sc-internal"
+  },
+  "ssh_user": "player",
+  "ssh_key": "~/.ssh/sc_host_key",
+  "snapshots": {
+    "baseline": "baseline.clean",
+    "recovery": "baseline.recovery",
+    "checkpoint_prefix": "checkpoint.shift-",
+    "max_checkpoints": 5
+  },
+  "guest_helper": {
+    "name": "yardd",
+    "path": "/usr/local/bin/yardd",
+    "trusted": false
+  },
+  "display": {
+    "type": "vnc",
+    "fallback": "spice",
+    "note": "VNC preferred for headless terminal. Fallback to SPICE if VNC unavailable."
+  },
+  "always_live": false,
+  "quests": ["Q002", "Q003", "Q004", "Q005", "Q007"],
+  "note": "Primary target VM for web service quests. Hosted on Debian. Named hermes after the messenger."
+}