Add starbuck and apollo as active/active app hosts (#21)

## Summary

- Closes [#20](#20).
- Register **starbuck** (`10.0.0.44`) and **apollo** (`10.0.0.7`) as Proxmox app hosts in `webservers`, with `host_apps` copied from **roslin** (same apps/ports; **no** `monica_site` worker — that stays a singleton on **adama**).
- Allow `starbuck` / `apollo` in `provision.sh` and `deploy.sh`; document inventory, NPM backends, and Alloy `host` labels.

## Test plan

- [ ] `ansible-inventory --list` shows both hosts under `webservers` at the expected IPs.
- [ ] Bootstrap SSH + passwordless sudo on each VM (keep a Proxmox console open for first UFW enable).
- [ ] `ansible starbuck,apollo -m ping`
- [ ] `./scripts/provision.sh starbuck --check` then `./scripts/provision.sh starbuck`
- [ ] `./scripts/provision.sh apollo --check` then `./scripts/provision.sh apollo`
- [ ] `./scripts/deploy.sh starbuck` and `./scripts/deploy.sh apollo` bring up the same app+env set as roslin.
- [ ] `monica_site` dj-queue worker still runs **only** on adama.
- [ ] Grafana/Loki show `host="starbuck"` and `host="apollo"`.
- [ ] NPM Advanced upstreams (manual): add `starbuck:PORT` and `apollo:PORT` beside adama/roslin.Reviewed-on: #21

inventory/host_vars/ai-server-4080.yml

@@ -22,7 +22,7 @@ searxng_stack: true
 gitea_key_path: "/home/{{ admin_user }}/.ssh/gitea_deploy"
 
 # company_site + dta_webapp + dta_service for side testing and active/active.
-# Ports MUST match adama/roslin so NPM can balance all three upstreams.
+# Ports MUST match adama/roslin/starbuck/apollo so NPM can balance all upstreams.
 host_apps:
   - { name: company_site, env: prod, port: 8000 }
   - { name: dta_webapp, env: prod, port: 8080 }