feat(alloy): add journal relabeling and kottos integration on puck

Introduce structured journal relabel rules on puck to tag Pallas-managed
units with {service, project, component} labels matching the Mnemosyne
and Daedalus schema. Add kottos release variable and vault secrets
example entries for the new Pallas FastAgent runtime.

Remove the defunct mnemosyne syslog listener now that Mnemosyne ships
JSON logs via the docker-socket pipeline.

ansible/kottos/stage.yml

@@ -0,0 +1,48 @@
+- name: Stage Kottos release tarball
+  hosts: localhost
+  gather_facts: false
+  vars:
+    archive_path: "{{rel_dir}}/kottos_{{kottos_rel}}.tar"
+    kottos_repo_url: "ssh://git@git.helu.ca:22022/r/kottos.git"
+    kottos_repo_dir: "{{repo_dir}}/kottos"
+
+  tasks:
+    - name: Ensure release directory exists
+      file:
+        path: "{{rel_dir}}"
+        state: directory
+        mode: '755'
+
+    - name: Ensure repo directory exists
+      file:
+        path: "{{repo_dir}}"
+        state: directory
+        mode: '755'
+
+    - name: Clone Kottos repository if not present
+      ansible.builtin.git:
+        repo: "{{kottos_repo_url}}"
+        dest: "{{kottos_repo_dir}}"
+        version: "{{kottos_rel}}"
+        accept_hostkey: true
+      register: git_clone
+      ignore_errors: true
+
+    - name: Fetch latest changes if already cloned
+      ansible.builtin.git:
+        repo: "{{kottos_repo_url}}"
+        dest: "{{kottos_repo_dir}}"
+        version: "{{kottos_rel}}"
+        update: true
+        force: true
+
+    - name: Create release archive
+      ansible.builtin.archive:
+        path: "{{kottos_repo_dir}}"
+        dest: "{{archive_path}}"
+        format: tar
+        exclude_path:
+          - "{{kottos_repo_dir}}/.git"
+          - "{{kottos_repo_dir}}/.venv"
+          - "{{kottos_repo_dir}}/__pycache__"
+          - "{{kottos_repo_dir}}/fastagent.secrets.yaml"