ha: VAULT1 CIFS mount monitor; runbooks: supervisor root-cause

HA: add binary_sensor.vault1_cifs_mounted (grep /proc/mounts every 5 min),
rest_command.vault1_push_heartbeat, and two automations — heartbeat push to
Uptime Kuma push monitor (id=45, 10-min timeout) and direct ntfy alert if
CIFS drops for >3 min. Catches the sda8-fallthrough scenario in <8 min.

Runbooks: root cause of credential file loss is NOT unclean shutdown but
the HAOS 17.3 supervisor (2026.05.x) deleting the cred file during mount
reload cycles. Exact moment: 2026-05-22 00:53:31 UTC, 13 min after the
HAOS 17.3 first-boot successful mount. NUT gap documented (HAOS not a NUT
slave); recommended to add Community NUT addon targeting cyberpower1@.200.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

ha/configuration.yaml

@@ -15,6 +15,16 @@ http:
     - 172.16.0.0/12 # <--- Trusts all Docker containers
     - 127.0.0.1 # <--- Localhost
 
+command_line:
+  - binary_sensor:
+      name: "VAULT1 CIFS Mounted"
+      unique_id: vault1_cifs_mounted
+      command: "grep -c '172.30.32.1/VAULT1' /proc/mounts"
+      device_class: connectivity
+      scan_interval: 300
+      payload_on: "1"
+      payload_off: "0"
+
 rest_command:
   ntfy_grafana_alerts:
     url: https://ntfy.goattw.net/grafana-alerts
@@ -25,3 +35,6 @@ rest_command:
       Title: "{{ title | default('Home Assistant') }}"
       Priority: "{{ priority | default('default') }}"
       Tags: "{{ tags | default('house') }}"
+  vault1_push_heartbeat:
+    url: "http://192.168.99.183:3001/api/push/yxhtvRPdixD4IY3Z4tVb?status=up&msg=VAULT1+CIFS+OK&ping="
+    method: GET