Repo had a 0-byte README. New one covers:
- Single-service inventory with the load-bearing cloudflared-mcp
container name (vault-mcp's legacy network aliases depend on it)
- Token-mode + dashboard-managed ingress contract
- .env contract (TUNNEL_TOKEN)
- Token rotation flow + how to map a new public hostname
- Cross-reference to homelab-ansible's roles/cloudflared README for
the redirect-loop gotcha on Traefik backends
- No-ports / one-tunnel / :latest gotchas
Working tree has an in-flight docker-compose.yml → compose.yml rename
(D docker-compose.yml + ?? compose.yml). Intentionally not part of
this commit.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
