Add starbuck and apollo as active/active app hosts (#21)

## Summary

- Closes [#20](#20).
- Register **starbuck** (`10.0.0.44`) and **apollo** (`10.0.0.7`) as Proxmox app hosts in `webservers`, with `host_apps` copied from **roslin** (same apps/ports; **no** `monica_site` worker — that stays a singleton on **adama**).
- Allow `starbuck` / `apollo` in `provision.sh` and `deploy.sh`; document inventory, NPM backends, and Alloy `host` labels.

## Test plan

- [ ] `ansible-inventory --list` shows both hosts under `webservers` at the expected IPs.
- [ ] Bootstrap SSH + passwordless sudo on each VM (keep a Proxmox console open for first UFW enable).
- [ ] `ansible starbuck,apollo -m ping`
- [ ] `./scripts/provision.sh starbuck --check` then `./scripts/provision.sh starbuck`
- [ ] `./scripts/provision.sh apollo --check` then `./scripts/provision.sh apollo`
- [ ] `./scripts/deploy.sh starbuck` and `./scripts/deploy.sh apollo` bring up the same app+env set as roslin.
- [ ] `monica_site` dj-queue worker still runs **only** on adama.
- [ ] Grafana/Loki show `host="starbuck"` and `host="apollo"`.
- [ ] NPM Advanced upstreams (manual): add `starbuck:PORT` and `apollo:PORT` beside adama/roslin.Reviewed-on: #21

scripts/provision.sh

@@ -18,7 +18,7 @@ On ai-server-4080 also: observability (Loki + Prometheus + Grafana) when
 observability_stack is true, and SearxNG when searxng_stack is true
 (chat_backend grounded search on :8088).
 
-  HOST              Optional. Limit to one host: adama, roslin, or ai-server-4080.
+  HOST              Optional. Limit to one host: adama, roslin, starbuck, apollo, or ai-server-4080.
                     Omit to run against all webservers.
 
 Options:
@@ -59,7 +59,7 @@ while [[ $# -gt 0 ]]; do
       EXTRA_ARGS+=(--ask-become-pass)
       shift
       ;;
-    adama|roslin|ai-server-4080)
+    adama|roslin|starbuck|apollo|ai-server-4080)
       LIMIT="$1"
       shift
       ;;