feat(alloy): add journal relabeling and kottos integration on puck

Introduce structured journal relabel rules on puck to tag Pallas-managed
units with {service, project, component} labels matching the Mnemosyne
and Daedalus schema. Add kottos release variable and vault secrets
example entries for the new Pallas FastAgent runtime.

Remove the defunct mnemosyne syslog listener now that Mnemosyne ships
JSON logs via the docker-socket pipeline.

ansible/pplg/prometheus.yml.j2

@@ -47,7 +47,18 @@ scrape_configs:
 
   - job_name: 'daedalus'
     static_configs:
-      - targets: ['puck.incus:22181']
+      - targets: ['{{ daedalus_metrics_host }}:{{ daedalus_metrics_port }}']
+    metrics_path: '/metrics'
+    scrape_interval: 15s
+
+  # Mnemosyne — single /metrics endpoint on the app container serves both
+  # django-prometheus HTTP/Celery metrics and the MCP server's tool-call
+  # counters (the mcp_server.metrics module registers into the same
+  # prometheus_client process registry on the Django side).  The mcp
+  # container itself does not expose /metrics; run 'em on the WSGI side.
+  - job_name: 'mnemosyne'
+    static_configs:
+      - targets: ['{{ mnemosyne_metrics_host }}:{{ mnemosyne_metrics_port }}']
     metrics_path: '/metrics'
     scrape_interval: 15s