feat(tf): provision askari — cx23/hel1 (CAX11 ARM was out of stock)

ARM (cax11) unavailable in all EU locations 2026-06-14; fell back to cx23 (x86,
same 2/4/40 spec, cheaper in hel1). Server created (id 141153963); offsite.yml
generated into the directory inventory.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

inventories/production/offsite.yml

@@ -0,0 +1,16 @@
+---
+# Generated by scripts/tf_to_inventory.py — do not edit manually.
+# Regenerate with: make tf-inventory TF_ENV=<env>
+
+all:
+  children:
+    control:
+      hosts: {}
+    docker_hosts:
+      hosts: {}
+    offsite_hosts:
+      hosts:
+        askari:
+          ansible_host: 77.42.120.136
+    proxmox_hosts:
+      hosts: {}

terraform/environments/offsite/main.tf

@@ -6,8 +6,9 @@ module "askari" {
   source = "../../modules/hetzner_vm"
 
   name               = "askari"
-  server_type        = "cax11" # ARM, 2 vCPU / 4 GB
-  location           = "hel1"  # Helsinki
+  server_type        = "cx23" # x86, 2 vCPU / 4 GB / 40 GB (CAX11/ARM was out of stock in
+  #                              every EU location 2026-06-14; cx23 is same-spec + cheaper)
+  location           = "hel1" # Helsinki
   image              = "debian-13"
   ansible_ssh_pubkey = var.ansible_ssh_pubkey
   ssh_admin_cidrs    = var.ssh_admin_cidrs