feat: rename rails/ to tools/ and add service tool suites

Rename the `rails/` directory to `tools/` for agent discoverability —
agents frequently failed to locate helper scripts due to the non-intuitive
directory name. Add backward-compat symlink `rails/ → tools/`.

New tool suites:
- Authentik: auth-token, user-list, user-create, group-list, app-list,
  flow-list, admin-status (8 scripts)
- Coolify: team-list, project-list, service-list, service-status, deploy,
  env-set (7 scripts)
- Woodpecker: pipeline-list, pipeline-status, pipeline-trigger (3 stubs)
- GLPI: session-init, computer-list, ticket-list, ticket-create, user-list
  (6 scripts)
- Health: stack-health.sh — stack-wide connectivity check

Infrastructure:
- Shared credential loader at tools/_lib/credentials.sh
- install.sh creates symlink + chmod on tool scripts
- All ~253 rails/ path references updated across 68+ files

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

tools/coolify/deploy.sh

@@ -0,0 +1,61 @@
+#!/usr/bin/env bash
+#
+# deploy.sh — Trigger Coolify service deployment
+#
+# Usage: deploy.sh -u <uuid> [-f]
+#
+# Options:
+#   -u uuid   Service UUID (required)
+#   -f        Force restart (stop then start)
+#   -h        Show this help
+set -euo pipefail
+
+MOSAIC_HOME="${MOSAIC_HOME:-$HOME/.config/mosaic}"
+source "$MOSAIC_HOME/tools/_lib/credentials.sh"
+load_credentials coolify
+
+UUID=""
+FORCE=false
+
+while getopts "u:fh" opt; do
+  case $opt in
+    u) UUID="$OPTARG" ;;
+    f) FORCE=true ;;
+    h) head -11 "$0" | grep "^#" | sed 's/^# \?//'; exit 0 ;;
+    *) echo "Usage: $0 -u <uuid> [-f]" >&2; exit 1 ;;
+  esac
+done
+
+if [[ -z "$UUID" ]]; then
+  echo "Error: -u uuid is required" >&2
+  exit 1
+fi
+
+if [[ "$FORCE" == "true" ]]; then
+  echo "Stopping service $UUID..."
+  curl -s -o /dev/null -w "" \
+    -X POST \
+    -H "Authorization: Bearer $COOLIFY_TOKEN" \
+    -H "Content-Type: application/json" \
+    "${COOLIFY_URL}/api/v1/services/${UUID}/stop"
+  sleep 2
+fi
+
+echo "Starting service $UUID..."
+response=$(curl -s -w "\n%{http_code}" \
+  -X POST \
+  -H "Authorization: Bearer $COOLIFY_TOKEN" \
+  -H "Content-Type: application/json" \
+  "${COOLIFY_URL}/api/v1/services/${UUID}/start")
+
+http_code=$(echo "$response" | tail -n1)
+body=$(echo "$response" | sed '$d')
+
+if [[ "$http_code" != "200" && "$http_code" != "201" && "$http_code" != "202" ]]; then
+  echo "Error: Deployment failed (HTTP $http_code)" >&2
+  echo "$body" | jq -r '.' 2>/dev/null >&2 || echo "$body" >&2
+  exit 1
+fi
+
+echo "Deployment triggered successfully for service $UUID"
+echo "$body" | jq -r '.message // empty' 2>/dev/null || true