feat(alloy): add journal relabeling and kottos integration on puck

Introduce structured journal relabel rules on puck to tag Pallas-managed
units with {service, project, component} labels matching the Mnemosyne
and Daedalus schema. Add kottos release variable and vault secrets
example entries for the new Pallas FastAgent runtime.

Remove the defunct mnemosyne syslog listener now that Mnemosyne ships
JSON logs via the docker-socket pipeline.

ansible/pplg/deploy.yml

@@ -208,6 +208,32 @@
       group: grafana
       mode: '750'
 
+  - name: Ensure Grafana dashboard provisioning directory exists
+    ansible.builtin.file:
+      path: /etc/grafana/provisioning/dashboards
+      state: directory
+      owner: grafana
+      group: grafana
+      mode: '750'
+
+  - name: Template Grafana dashboard provider (file source → /var/lib/grafana/dashboards)
+    ansible.builtin.template:
+      src: "dashboards_provider.yml.j2"
+      dest: "/etc/grafana/provisioning/dashboards/puck.yaml"
+      owner: grafana
+      group: grafana
+      mode: '640'
+    notify: restart grafana
+
+  - name: Template Puck Services dashboard (Mnemosyne + Pallas + Daedalus)
+    ansible.builtin.template:
+      src: "puck_services_dashboard.json.j2"
+      dest: "/var/lib/grafana/dashboards/puck_services.json"
+      owner: grafana
+      group: grafana
+      mode: '640'
+    notify: restart grafana
+
   - name: Template Grafana main configuration
     ansible.builtin.template:
       src: "grafana.ini.j2"