feat: rename rails/ to tools/ and add service tool suites

Rename the `rails/` directory to `tools/` for agent discoverability —
agents frequently failed to locate helper scripts due to the non-intuitive
directory name. Add backward-compat symlink `rails/ → tools/`.

New tool suites:
- Authentik: auth-token, user-list, user-create, group-list, app-list,
  flow-list, admin-status (8 scripts)
- Coolify: team-list, project-list, service-list, service-status, deploy,
  env-set (7 scripts)
- Woodpecker: pipeline-list, pipeline-status, pipeline-trigger (3 stubs)
- GLPI: session-init, computer-list, ticket-list, ticket-create, user-list
  (6 scripts)
- Health: stack-health.sh — stack-wide connectivity check

Infrastructure:
- Shared credential loader at tools/_lib/credentials.sh
- install.sh creates symlink + chmod on tool scripts
- All ~253 rails/ path references updated across 68+ files

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

AUDIT-2026-02-17-framework-consistency.md

@@ -24,19 +24,19 @@ Scope:
 
 ### MF-001 (QA rails path correction)
 Updated:
-- `rails/qa/qa-hook-wrapper.sh`
-- `rails/qa/qa-hook-stdin.sh`
-- `rails/qa/qa-hook-handler.sh`
-- `rails/qa/remediation-hook-handler.sh`
-- `rails/qa/qa-queue-monitor.sh`
+- `tools/qa/qa-hook-wrapper.sh`
+- `tools/qa/qa-hook-stdin.sh`
+- `tools/qa/qa-hook-handler.sh`
+- `tools/qa/remediation-hook-handler.sh`
+- `tools/qa/qa-queue-monitor.sh`
 
 Change:
-- Standardized handler paths to `~/.config/mosaic/rails/qa/...`.
+- Standardized handler paths to `~/.config/mosaic/tools/qa/...`.
 
 ### MF-002 + MF-003 (conditional loading/context detection)
 Updated:
-- `rails/bootstrap/agent-lint.sh`
-- `rails/bootstrap/agent-upgrade.sh`
+- `tools/bootstrap/agent-lint.sh`
+- `tools/bootstrap/agent-upgrade.sh`
 - `templates/agent/SPEC.md`
 
 Change:
@@ -58,7 +58,7 @@ Updated:
 - `skills/pr-reviewer/SKILL.md`
 
 Change:
-- Replaced all `~/.claude/scripts/git/...` with `~/.config/mosaic/rails/git/...`.
+- Replaced all `~/.claude/scripts/git/...` with `~/.config/mosaic/tools/git/...`.
 - Replaced `~/.claude/skills/...` with `~/.config/mosaic/skills/...`.
 
 ### MF-006 (worktree skill docs hierarchy)
@@ -109,7 +109,7 @@ These are required to support existing Claude runtime integration while keeping
 Executed checks:
 - `rg -n "~/.claude|\\.claude/|agent-guides" ~/src/agent-skills -S`
   - Result: no matches after remediation.
-- `rg -n "~/.config/mosaic/rails/(qa-hook|remediation-hook|qa-queue-monitor)" ~/src/mosaic-bootstrap -S`
+- `rg -n "~/.config/mosaic/tools/(qa-hook|remediation-hook|qa-queue-monitor)" ~/src/mosaic-bootstrap -S`
   - Result: no invalid old-style QA rail paths remain.
 - Installed runtime validation:
-  - `~/.config/mosaic` contains `rails/git`, `rails/portainer`, `rails/cicd`, `skills`, and `bin` tooling.
+  - `~/.config/mosaic` contains `tools/git`, `tools/portainer`, `tools/cicd`, `skills`, and `bin` tooling.