Scrub tracked secrets and switch ATVM docs to local credential references

- remove hardcoded credentials, tokens, registration codes, and similar secret values from tracked ATVM and CDS MCP docs
- replace those values with references to /home/aw/code/cds/.env.credentials.local and the corresponding environment variable names
- update current operator guides to instruct sourcing .env.credentials.local before credential-dependent setup and automation workflows
- update the ATVM setup scripts to consume ATVM_TARGET_PASSWORD from the environment instead of hardcoding the Ubuntu root SSH password
- scrub the remaining tracked artifact log entry that still included the old CMC registration code
- keep the local-only credential inventory in .env.credentials.local while leaving that file untracked

atvm/inventory/accounts-and-credentials.md

@@ -1,62 +1,64 @@
 # ATVM Accounts And Credentials
 
 This file organizes the ATVM lab account and credential information that was preserved from the original long-form notes.
+All secret values have been moved to `/home/aw/code/cds/.env.credentials.local`.
+Use the variable names below instead of storing raw credentials in tracked files.
 
 ## CMC GCStage
 - URL:
-  - `https://ui.gcstage.cloud.nonprod.cirrusdata.com/`
+  - `CMC_GCSTAGE_URL`
 
 ## CMC ATVM Test Account
 - User:
-  - `qatest.atvm@cirrusdata.com`
+  - `CMC_TEST_USER`
 - Password:
-  - `fEMQ9N4KEfYyFnS`
+  - `CMC_TEST_PASSWORD`
 - 2FA registration code:
-  - `C7FIIZV6SGZ67XGATFN7YQHEJI6BHGPL`
+  - `CMC_TEST_TOTP_SECRET`
 - CMC API token:
-  - `lNSrdRkqJWJlxierQTcoIiZppmORigyZiXQsHhGiJtmnGKCGAJTwMpRsqKSLgKdSHTXDpYPtPyszDZTvOvGEoXuBZFdkTkxyvNTlSxYKLsBcEpTbRkRQkQppdwBhaUyauPZxolHmOTeZOVIAZCnyGBTQjVxsSaaJXwaguIgeFbYctONcCBhayNTruJOtYJGYbLBESrRkDMuHZBCpZoMeKgeNjifqdROMYhKCyUFhVhaOvFSWizFNlQZYRInscFw`
+  - `CIRRUS_API_TOKEN`
 - Xray location for failed tests:
   - `../cdc-e2e/cypress/cmcXray`
 
 ## CMC User-Administration Test Account
 - User:
-  - `qatestuser.atvm@cirrusdata.com`
+  - `CMC_USERADMIN_TEST_USER`
 - Password:
-  - `fEMQ9N4KEfYyFnS#1`
+  - `CMC_USERADMIN_TEST_PASSWORD`
 - 2FA registration code:
-  - `WQ6F6NIDSIY57BLHMTTVBMIXZI44G5F7`
+  - `CMC_USERADMIN_TOTP_SECRET`
 - CMC API token:
-  - `DQYjVaDFbsFDcfVEoIZNbiiWLkoMOMSzoFyVKkFxwvribCrLiUqEwVVVZDurapQTiJEuGYcJVOvFnXSmcIpwXIJDzPGiidaQwMfbPGirmpKsVZrPQeHAgbABpyNjiDxSOzmGWvDpBEHdrnYceSxtkvYkhSGPOolWOUYdblCuzfnFCuwLtOklRZGsZRAEbBfeJPyrfnZCSMcGBRoVkMRXttYcJKEwOqzlKKKXWtyKKirfyOpSpTlnREUQlgwjGSB`
+  - `CMC_USERADMIN_API_TOKEN`
 
 ## Red Hat Free Subscription Account
 - User:
-  - `qatest.atvm@cirrusdata.com`
+  - `REDHAT_SUBSCRIPTION_USER`
 - Password:
-  - `rh@CDSi101cdsi2012`
+  - `REDHAT_SUBSCRIPTION_PASSWORD`
 - Registration command:
-  - `subscription-manager register --username qatest.atvm@cirrusdata.com --password rh@CDSi101cdsi2012`
+  - `subscription-manager register --username "$REDHAT_SUBSCRIPTION_USER" --password "$REDHAT_SUBSCRIPTION_PASSWORD"`
 - Re-register sequence:
 ```none
 # subscription-manager remove --all
 # subscription-manager unregister
 # subscription-manager clean
-# subscription-manager register --username qatest.atvm@cirrusdata.com --password rh@CDSi101cdsi2012
+# subscription-manager register --username "$REDHAT_SUBSCRIPTION_USER" --password "$REDHAT_SUBSCRIPTION_PASSWORD"
 ```
 - Renewal link:
   - `https://developers.redhat.com/products/rhel/download#publicandprivatecloudreadyrhelimages`
 
 ## Related Host Credentials
 - ATVM controller host:
-  - `root / atvmcdsi2012`
-  - `cypressuser / atvmcypress`
+  - `ATVM_CONTROLLER_USER / ATVM_CONTROLLER_PASSWORD`
+  - `ATVM_CONTROLLER_ALT_USER / ATVM_CONTROLLER_ALT_PASSWORD`
 - Linux repository VM:
-  - `root / cdsi2012`
+  - `ATVM_REPO_USER / ATVM_REPO_PASSWORD`
 - vCenter `192.168.0.201`:
-  - `administrator@qalab.cdsi.local / CDSi101!`
+  - `VCENTER_USER / VCENTER_PASSWORD`
 - ESXi `192.168.1.165`:
-  - `root / CDSi101!`
+  - `ESXI_HOST_1_USER / ESXI_HOST_1_PASSWORD`
 - ESXi `192.168.1.166`:
-  - `root / CDSi101!`
+  - `ESXI_HOST_2_USER / ESXI_HOST_2_PASSWORD`
 
 ## Preserved Source
 - Full original notes remain in:

atvm/inventory/infrastructure.md

@@ -1,28 +1,29 @@
 # ATVM Infrastructure
 
 This file organizes the main infrastructure reference that was previously embedded in the long-form ATVM notes.
+Tracked docs should reference `/home/aw/code/cds/.env.credentials.local` for secret values instead of storing them inline.
 
 ## Storage / Appliance
 - Primary DGS Phoenix Server: `192.168.1.172`
 - Replica DGS Phoenix Server: `192.168.1.89`
 - Primary DGS web login:
-  - `admin / cdsi2012DGS172`
+  - `DGS_PRIMARY_USER / DGS_PRIMARY_PASSWORD`
 - The preserved detailed storage and appliance notes remain in:
   - `archive/imported-notes/cypress-automation-for-cmc.md`
 
 ## VMware
 - Active vCenter Server Appliance: `192.168.0.201`
 - vCenter login:
-  - `administrator@qalab.cdsi.local / CDSi101!`
+  - `VCENTER_USER / VCENTER_PASSWORD`
 - Primary ESXi hosts:
   - `192.168.1.165`
   - `192.168.1.166`
 - ESXi `192.168.1.165`:
-  - SSH: `root / CDSi101!`
-  - IPMI: `admin / cdsi2012`
+  - SSH: `ESXI_HOST_1_USER / ESXI_HOST_1_PASSWORD`
+  - IPMI: `ESXI_HOST_1_IPMI_USER / ESXI_HOST_1_IPMI_PASSWORD`
 - ESXi `192.168.1.166`:
-  - SSH: `root / CDSi101!`
-  - IPMI: `admin / cdsi2012`
+  - SSH: `ESXI_HOST_2_USER / ESXI_HOST_2_PASSWORD`
+  - IPMI: `ESXI_HOST_2_IPMI_USER / ESXI_HOST_2_IPMI_PASSWORD`
 - Legacy VMware environment details are preserved in the archived notes.
 
 ## ATVM Controller Host
@@ -32,8 +33,8 @@ This file organizes the main infrastructure reference that was previously embedd
 - Controller IP:
   - `192.168.3.190`
 - Controller credentials:
-  - `root / atvmcdsi2012`
-  - `cypressuser / atvmcypress`
+  - `ATVM_CONTROLLER_USER / ATVM_CONTROLLER_PASSWORD`
+  - `ATVM_CONTROLLER_ALT_USER / ATVM_CONTROLLER_ALT_PASSWORD`
 - Current noted controller variants:
   - `atvm-cypress-vm`
   - `atvm-cypress-vm-1`
@@ -44,7 +45,7 @@ This file organizes the main infrastructure reference that was previously embedd
 - Repository IP:
   - `192.168.3.199`
 - Repository credentials:
-  - `root / cdsi2012`
+  - `ATVM_REPO_USER / ATVM_REPO_PASSWORD`
 - Repository content families include:
   - RedHat
   - Debian