English docs and passwordless SSH mesh for lab fleet

- Translate all documentation to English
- Add docs/ssh-mesh.md and scripts/setup/setup-ssh-mesh.sh
- Add config/hosts/atc-lab.hosts for /etc/hosts on all VMs
- Ignore atc_cluster private key in git; mesh deployed on 12 hosts

docs/operations.md

@@ -1,16 +1,16 @@
-# Operaties
+# Operations
 
-## Config wijzigen en deployen
+## Change config and deploy
 
 ```bash
 cd /root/lakehouse
-# Bewerk config/homepage/*.yaml of rss-proxy/server.py
-git add -A && git commit -m "beschrijving" && git push origin master
+# Edit config/homepage/*.yaml or rss-proxy/server.py
+git add -A && git commit -m "description" && git push origin master
 
-# Homepage herladen
+# Reload homepage
 docker exec homepage wget -qO- http://127.0.0.1:3000/api/revalidate
 
-# RSS proxy rebuild
+# Rebuild RSS proxy
 docker compose -f deploy/docker-compose.homepage.yml build rss-proxy
 docker compose -f deploy/docker-compose.homepage.yml up -d rss-proxy
 ```
@@ -23,21 +23,29 @@ docker logs -f rss-proxy
 docker logs -f superset
 ```
 
-Homepage applicatielog staat buiten git: `config/homepage/logs/` (genegeerd door `.gitignore`).
+Application logs are outside git: `config/homepage/logs/` (see `.gitignore`).
 
-## Container inventory bijwerken
+## Refresh container inventory
 
 ```bash
 ./scripts/deploy/export-inventory.sh
 git add inventory/ && git commit -m "chore: refresh container inventory"
 ```
 
-## Stack herstarten
+## Restart full docker01 stack
 
 ```bash
 ./scripts/deploy/deploy-atc-docker01.sh
 ```
 
-## Git op de server
+## SSH between hosts
 
-Remote staat op `atc-docker01` in `/root/lakehouse`. Gebruik je eigen credentials voor push naar Forgejo op `atc-mgt01`.
+```bash
+ssh -i /root/.ssh/atc_cluster root@atc-lake01
+```
+
+See [ssh-mesh.md](ssh-mesh.md).
+
+## Git on the server
+
+Clone lives at `/root/lakehouse` on `atc-docker01`. Use your Forgejo credentials to push to `atc-mgt01`.