Team provisioning

Day-0 imaging hands off to idempotent day-2 management; each person's personal repo layers over a small shared company.roles collection (no fork). Background: the team-fleet provisioning blog post.

Items

• Offer the personal-repo starter as a GitLab template project ("Use template") instead of copy-the-examples/-directory, so a new hire starts from "Use this template" rather than copying files — post-launch polish