hostwarden-housekeepinglisted

# hostwarden-housekeeping Routine health inspection for a server or the local machine. **Never run automatically** — only on explicit user request. The whole of the Hostwarden first-connection onboarding pipeline still applies before any of this runs. ## Workflow 1. **Load overrides**, key `hostwarden-housekeeping`, per `rules/overrides.md`. Read `memory/machines/<hostname>/memory.md` for the service list, last-known state and per-machine quirks, and `memory/housekeeping.md` if present for cross-machine custom checks (free-form Markdown, gitignored by default). 2. **Select checks.** Run all baseline checks for the detected OS plus any service-specific checks triggered by entries in the server's `memory.md` (e.g. PostgreSQL, nginx, Docker). On a Linux host without an `Appliance:` line, `ls -d /etc/casaos` runs here too, because CasaOS is often on a host before memory names it or Docker: a match selects `references/service-checks.md` → CasaOS. The backup-presence check from `references/backup-presence.md` runs on every host, independent of `memory.md` entries — on a host whose OS file is not `sh`, in the form that file's `## Housekeeping and Audits` section gives. So do the USB inventory from `references/usb-devices.md`, the guest check from `references/guests.md`, on a host with guests the passthrough inventory from `references/passthrough.md`, and `references/bmc-event-log.md`, which settles the `Management:` line on