feat: rename rails/ to tools/ and add service tool suites

Rename the `rails/` directory to `tools/` for agent discoverability —
agents frequently failed to locate helper scripts due to the non-intuitive
directory name. Add backward-compat symlink `rails/ → tools/`.

New tool suites:
- Authentik: auth-token, user-list, user-create, group-list, app-list,
  flow-list, admin-status (8 scripts)
- Coolify: team-list, project-list, service-list, service-status, deploy,
  env-set (7 scripts)
- Woodpecker: pipeline-list, pipeline-status, pipeline-trigger (3 stubs)
- GLPI: session-init, computer-list, ticket-list, ticket-create, user-list
  (6 scripts)
- Health: stack-health.sh — stack-wide connectivity check

Infrastructure:
- Shared credential loader at tools/_lib/credentials.sh
- install.sh creates symlink + chmod on tool scripts
- All ~253 rails/ path references updated across 68+ files

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

tools/git/pr-merge.sh

@@ -0,0 +1,116 @@
+#!/bin/bash
+# pr-merge.sh - Merge pull requests on Gitea or GitHub
+# Usage: pr-merge.sh -n PR_NUMBER [-m squash] [-d] [--skip-queue-guard]
+
+set -e
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "$SCRIPT_DIR/detect-platform.sh"
+
+# Default values
+PR_NUMBER=""
+MERGE_METHOD="squash"
+DELETE_BRANCH=false
+SKIP_QUEUE_GUARD=false
+
+usage() {
+    cat <<EOF
+Usage: $(basename "$0") [OPTIONS]
+
+Merge a pull request on the current repository (Gitea or GitHub).
+
+Options:
+    -n, --number NUMBER     PR number to merge (required)
+    -m, --method METHOD     Merge method: squash only (default: squash)
+    -d, --delete-branch     Delete the head branch after merge
+        --skip-queue-guard  Skip CI queue guard wait before merge
+    -h, --help              Show this help message
+
+Examples:
+    $(basename "$0") -n 42                    # Merge PR #42
+    $(basename "$0") -n 42 -m squash          # Squash merge
+    $(basename "$0") -n 42 -d                 # Squash merge and delete branch
+    $(basename "$0") -n 42 --skip-queue-guard # Skip queue guard wait
+EOF
+    exit 1
+}
+
+# Parse arguments
+while [[ $# -gt 0 ]]; do
+    case $1 in
+        -n|--number)
+            PR_NUMBER="$2"
+            shift 2
+            ;;
+        -m|--method)
+            MERGE_METHOD="$2"
+            shift 2
+            ;;
+        -d|--delete-branch)
+            DELETE_BRANCH=true
+            shift
+            ;;
+        --skip-queue-guard)
+            SKIP_QUEUE_GUARD=true
+            shift
+            ;;
+        -h|--help)
+            usage
+            ;;
+        *)
+            echo "Unknown option: $1" >&2
+            usage
+            ;;
+    esac
+done
+
+if [[ -z "$PR_NUMBER" ]]; then
+    echo "Error: PR number is required (-n)" >&2
+    usage
+fi
+
+if [[ "$MERGE_METHOD" != "squash" ]]; then
+    echo "Error: Mosaic policy enforces squash merge only. Received '$MERGE_METHOD'." >&2
+    exit 1
+fi
+
+BASE_BRANCH="$("$SCRIPT_DIR/pr-metadata.sh" -n "$PR_NUMBER" | python3 -c 'import json, sys; print((json.load(sys.stdin).get("baseRefName") or "").strip())')"
+if [[ "$BASE_BRANCH" != "main" ]]; then
+    echo "Error: Mosaic policy allows merges only for PRs targeting 'main' (found '$BASE_BRANCH')." >&2
+    exit 1
+fi
+
+if [[ "$SKIP_QUEUE_GUARD" != true ]]; then
+    "$SCRIPT_DIR/ci-queue-wait.sh" \
+        --purpose merge \
+        -B "$BASE_BRANCH" \
+        -t "${MOSAIC_CI_QUEUE_TIMEOUT_SEC:-900}" \
+        -i "${MOSAIC_CI_QUEUE_POLL_SEC:-15}"
+fi
+
+PLATFORM=$(detect_platform)
+
+case "$PLATFORM" in
+    github)
+        CMD="gh pr merge $PR_NUMBER --squash"
+        [[ "$DELETE_BRANCH" == true ]] && CMD="$CMD --delete-branch"
+        eval "$CMD"
+        ;;
+    gitea)
+        # tea pr merge syntax
+        CMD="tea pr merge $PR_NUMBER --style squash"
+
+        # Delete branch after merge if requested
+        if [[ "$DELETE_BRANCH" == true ]]; then
+            echo "Note: Branch deletion after merge may need to be done separately with tea" >&2
+        fi
+
+        eval "$CMD"
+        ;;
+    *)
+        echo "Error: Could not detect git platform" >&2
+        exit 1
+        ;;
+esac
+
+echo "PR #$PR_NUMBER merged successfully"