[Deploy] First deployment to vfw-core — end-to-end verification

[maxzaikin]

Summary

Deploy complete VaultFlower stack to vfw-core (xxx.xxx.xxx.210)
and verify full system operation.

Context

See Operations-Deployment-Guide and
Operations-Vault-Init

Acceptance Criteria

• vfw-core prepared: DNS, NTP, data disk mounted
• Docker installed and configured
• Private registry running with all images pushed
• Infrastructure stack started and healthy (all containers)
• Vault initialized: Shamir 5 shares distributed to 5 admins
• Vault unsealed (3 of 5 shares)
• DEKs generated and stored in Vault
• Database migrations run on all three databases
• Application stack started and healthy
• nginx started with TLS 1.3 certificate from vfw-pki
• Observability stack started (OTel, Jaeger, VictoriaMetrics, Grafana)
• Network verification script passes (all PASS)
• First Admin user created
• Login via browser: https://vfw-core.contoso.com ✓
• Create test asset and credential ✓
• Complete one ROTATION_TASK end-to-end ✓
• Verify audit events in all three databases ✓
• Verify SIEM CEF events forwarded ✓
• Rotation Agent (APP01) connected and processing rotation ✓
• Grafana dashboards showing metrics ✓