feat: rename rails/ to tools/ and add service tool suites

Rename the `rails/` directory to `tools/` for agent discoverability —
agents frequently failed to locate helper scripts due to the non-intuitive
directory name. Add backward-compat symlink `rails/ → tools/`.

New tool suites:
- Authentik: auth-token, user-list, user-create, group-list, app-list,
  flow-list, admin-status (8 scripts)
- Coolify: team-list, project-list, service-list, service-status, deploy,
  env-set (7 scripts)
- Woodpecker: pipeline-list, pipeline-status, pipeline-trigger (3 stubs)
- GLPI: session-init, computer-list, ticket-list, ticket-create, user-list
  (6 scripts)
- Health: stack-health.sh — stack-wide connectivity check

Infrastructure:
- Shared credential loader at tools/_lib/credentials.sh
- install.sh creates symlink + chmod on tool scripts
- All ~253 rails/ path references updated across 68+ files

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

tools/git/detect-platform.ps1

@@ -0,0 +1,83 @@
+# detect-platform.ps1 - Detect git platform (Gitea or GitHub) for current repo
+# Usage: . .\detect-platform.ps1; Get-GitPlatform
+#        or: .\detect-platform.ps1 (prints platform name)
+
+function Get-GitPlatform {
+    [CmdletBinding()]
+    param()
+
+    $remoteUrl = git remote get-url origin 2>$null
+
+    if ([string]::IsNullOrEmpty($remoteUrl)) {
+        Write-Error "Not a git repository or no origin remote"
+        return $null
+    }
+
+    # Check for GitHub
+    if ($remoteUrl -match "github\.com") {
+        return "github"
+    }
+
+    # Check for common Gitea indicators
+    # Gitea URLs typically don't contain github.com, gitlab.com, bitbucket.org
+    if ($remoteUrl -notmatch "gitlab\.com" -and $remoteUrl -notmatch "bitbucket\.org") {
+        # Assume Gitea for self-hosted repos
+        return "gitea"
+    }
+
+    return "unknown"
+}
+
+function Get-GitRepoInfo {
+    [CmdletBinding()]
+    param()
+
+    $remoteUrl = git remote get-url origin 2>$null
+
+    if ([string]::IsNullOrEmpty($remoteUrl)) {
+        Write-Error "Not a git repository or no origin remote"
+        return $null
+    }
+
+    # Extract owner/repo from URL
+    # Handles: git@host:owner/repo.git, https://host/owner/repo.git, https://host/owner/repo
+    $repoPath = $remoteUrl
+    if ($remoteUrl -match "^git@") {
+        $repoPath = ($remoteUrl -split ":")[1]
+    } else {
+        # Remove protocol and host
+        $repoPath = $remoteUrl -replace "^https?://[^/]+/", ""
+    }
+
+    # Remove .git suffix if present
+    $repoPath = $repoPath -replace "\.git$", ""
+
+    return $repoPath
+}
+
+function Get-GitRepoOwner {
+    [CmdletBinding()]
+    param()
+
+    $repoInfo = Get-GitRepoInfo
+    if ($repoInfo) {
+        return ($repoInfo -split "/")[0]
+    }
+    return $null
+}
+
+function Get-GitRepoName {
+    [CmdletBinding()]
+    param()
+
+    $repoInfo = Get-GitRepoInfo
+    if ($repoInfo) {
+        return ($repoInfo -split "/")[-1]
+    }
+    return $null
+}
+
+# If script is run directly (not dot-sourced), output the platform
+if ($MyInvocation.InvocationName -ne ".") {
+    Get-GitPlatform
+}