Add n8n workflows 01-08 (with upgrades), 14-16; planning docs; .gitignore

docs/planning/TODO.md

@@ -5,7 +5,9 @@
 - [ ] Regenerate N.O.M.A.D. Newt secret (was exposed in chat)
 
 ## Infrastructure
-- [ ] Deploy Pi-hole ×2 (primary on PD + backup on Serenity or Pi4)
+- [ ] Deploy Pi-hole 3-node HA cluster (PD + Serenity + RPi4) — see docs/planning/DEPLOY_PIHOLE.md
+  - RPi4 IP still TBD — fill in before deploying
+- [ ] Deploy Kima-Hub — see docs/planning/DEPLOY_KIMA_HUB.md
 - [ ] Set up off-site backup for vital data (appdata, databases, config repo, photos)
 - [ ] Remove dead Unraid-Cloudflared-Tunnel container from Serenity
 - [ ] Serenity malcolm pool capacity planning (heavily utilized)
@@ -32,6 +34,14 @@
 - [ ] Document meshtastic stack fully (see docs/reference/MESHTASTIC.md)
 - [ ] Document N.O.M.A.D. containers (start_nomad.sh services)
 
+## n8n Workflows
+- [ ] Create Gotify apps and n8n credentials: Reminders, n8n Health, Uptime / Infra
+- [ ] Add env vars to n8n: `PAPERLESS_API_TOKEN`, `PAPERLESS_TAG_TRANSCRIPTION`, `PAPERLESS_TAG_LECTURE_NOTES`, `N8N_API_KEY`
+- [ ] Set up `PD SSH` credential in n8n for workflow 16 (see n8n-workflows/README.md)
+- [ ] Add sudoers NOPASSWD rule for n8n watchdog (see n8n-workflows/README.md)
+- [ ] Import and activate upgraded workflows: 01, 04, 08
+- [ ] Import and activate new workflows: 14, 15 (16 already active)
+
 ## Completed
 - [x] Deploy Gotify (Phase 1) — 2026-05-05
 - [x] Deploy AI stack — LiteLLM, OpenWebUI, Qdrant, Whisper, SearXNG (Phase 2) — 2026-05-05
@@ -43,3 +53,7 @@
 - [x] Fill in port/URL columns in SERVICES_DIRECTORY.md — 2026-05-09
 - [x] Create ROCINANTE.md server doc — 2026-05-09
 - [x] Update all docs to reflect deployed state — 2026-05-09
+- [x] Write n8n workflow upgrade + new workflow plans (01, 04, 08, 14, 15, 16) — 2026-05-09
+- [x] Write Pi-hole 3-node HA deployment plan — 2026-05-09
+- [x] Write Kima-Hub deployment plan — 2026-05-09
+- [x] Create Postgres dedup tables (grafana_alert_dedup, n8n_health_dedup) on PD — 2026-05-09