chore(rmi-backend): apply fleet-template standards — add .editorconfig + .gitattributes, fix stale IPs, tighten qdrant-audit CI gate

- Add .editorconfig (Python 4-space, default 2, LF, UTF-8) per fleet-template
- Add .gitattributes (LF normalization, lockfile binary, generated paths)
- Fix AGENTS.md:35 — netcup (100.100.18.18) → Talos (100.104.130.92)
- Mark TODO.md:5 done — Qdrant stale IP (fixed in 3c6b295)
- Remove continue-on-error: true from qdrant-cleanup job (inner step has || \, no behavior change)

Refs: standards/GAPS.md#4 (Make CI gates authoritative), standards/GAPS.md#9 (Repo tooling parity), standards/GAPS.md#12 (Documentation contradictions)

.editorconfig

@@ -0,0 +1,20 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+indent_style = space
+indent_size = 2
+insert_final_newline = true
+trim_trailing_whitespace = true
+max_line_length = 100
+
+[*.md]
+trim_trailing_whitespace = false
+
+[Makefile]
+indent_style = tab
+
+[*.{py,pyi}]
+indent_size = 4
+max_line_length = 120

.gitattributes

@@ -0,0 +1,28 @@
+# Line endings — normalize to LF
+*                 text=auto eol=lf
+*.bat             text eol=crlf
+*.cmd             text eol=crlf
+*.ps1             text eol=crlf
+
+# Lockfiles are binaries (don't diff them)
+*.lock            -text
+package-lock.json -text
+pnpm-lock.yaml    -text
+yarn.lock         -text
+bun.lock          -text
+bun.lockb         binary
+uv.lock           -text
+poetry.lock       -text
+
+# Generated / vendored
+openapi.json      linguist-generated=true
+dist/**           linguist-generated=true
+build/**          linguist-generated=true
+*.tsbuildinfo     linguist-generated=true
+node_modules/**   linguist-generated=true
+.ruff_cache/**    linguist-generated=true
+.mypy_cache/**    linguist-generated=true
+.pytest_cache/**  linguist-generated=true
+
+# Linguist overrides
+*.py              linguist-language=Python

.github/workflows/ci.yml

@@ -107,9 +107,8 @@ jobs:
   qdrant-cleanup:
     # T15 (G14 FIX) — informational check. Qdrant only runs on netcup,
     # not in CI, so this will always skip here. The audit script
-    # gracefully handles connection failures.
+    # gracefully handles connection failures (inner step uses || \).
     runs-on: ubuntu-latest
-    continue-on-error: true
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-python@v5

AGENTS.md

@@ -32,7 +32,7 @@ Read these files in order:
 
 ## The Server
 
-ALL work happens on netcup (100.100.18.18).
+ALL work happens on Talos (100.104.130.92).
 
 ```
 ssh netcup

TODO.md

@@ -2,7 +2,7 @@
 
 ## Active
 - [ ] Fix `rmi-redis:6379` name resolution so `/health` returns healthy
-- [ ] Fix Qdrant stale IP bind (`100.100.18.18:6333` → `127.0.0.1:6333`)
+- [x] Fix Qdrant stale IP bind (was `100.100.18.18:6333` → now `127.0.0.1:6333`, fixed in 3c6b295)
 - [ ] Rotate 5 Telegram tokens leaked in `data/cryptoscamdb_urls.yaml` history
 - [ ] Rotate Solana Tracker, Arkham WS, Stripe, Helius webhook secrets
 - [ ] Remove `continue-on-error: true` and `|| true` from `.github/workflows/ci.yml`