feat(ansible): standardize Neo4j ports and add monitoring

- Unify Neo4j HTTP/Bolt/syslog ports across ariel and umbriel hosts
- Add neo4j_metrics_port (22094) for APOC exporter sidecar
- Add umbriel to Prometheus node_exporter targets
- Add Neo4j scrape config and alerts for tx rollback rate and
  stalled store growth
- Replace kernos_harper MCP with andromeda (caliban.helu.ca)
- Remove angelia MCP from kottos fastagent config
- Switch neo4j group membership from keeper_user to ponos

ansible/inventory/host_vars/ariel.incus.yml

@@ -9,7 +9,7 @@ services:
 
 # Alloy
 alloy_log_level: "warn"
-neo4j_syslog_port: 22011
+neo4j_syslog_port: 51414
 
 # Neo4j
 neo4j_user: neo4j
@@ -17,6 +17,7 @@ neo4j_group: neo4j
 neo4j_directory: /srv/neo4j
 neo4j_auth_user: neo4j
 neo4j_auth_password: "{{ vault_neo4j_auth_password }}"
-neo4j_http_port: 25554
-neo4j_bolt_port: 7687
+neo4j_http_port: 22084
+neo4j_bolt_port: 22074
+neo4j_metrics_port: 22094
 neo4j_apoc_unrestricted: "apoc.*"

ansible/inventory/host_vars/prospero.incus.yml

@@ -72,6 +72,7 @@ prometheus_targets:
   - 'sycorax.incus:9100'
   - 'prospero.incus:9100'
   - 'rosalind.incus:9100'
+  - 'umbriel.incus:9100'
 
 # Prometheus OAuth2-Proxy Sidecar
 prometheus_proxy_port: 9091

ansible/inventory/host_vars/umbriel.incus.yml

@@ -13,7 +13,7 @@ services:
 
 # Alloy
 alloy_log_level: "warn"
-neo4j_syslog_port: 22012
+neo4j_syslog_port: 51414
 
 # Neo4j
 neo4j_user: neo4j
@@ -21,6 +21,7 @@ neo4j_group: neo4j
 neo4j_directory: /srv/neo4j
 neo4j_auth_user: neo4j
 neo4j_auth_password: "{{ vault_mnemosyne_neo4j_auth_password }}"
-neo4j_http_port: 25555
-neo4j_bolt_port: 7687
+neo4j_http_port: 22084
+neo4j_bolt_port: 22074
+neo4j_metrics_port: 22094
 neo4j_apoc_unrestricted: "apoc.*"