configs: rename dirs to match live koopa containers

Reflect host naming in git paths:
- configs/taler-hacktivism/ (was taler-merchant) → container taler-hacktivism
- configs/taler-hacktivism-bank/ (was taler-bank) → container …-bank,
  image taler-hacktivism-banking:live
- configs/taler-exchange-ansible/ already matches …-exchange-ansible
- configs/taler-exchange/ = conf inside that exchange container

Update LIVE.md, README, ports/refs. No secret values.

configs/README.md

@@ -1,20 +1,17 @@
-# Configs
+# Config mirrors (from host koopa)
 
-| Path | Source on koopa |
-|------|-----------------|
-| `caddy/` | host `/etc/caddy` |
-| `tor/` | host `/etc/tor` |
-| `taler-exchange/` | container `taler-exchange-hacktivism`: overrides + coins |
-| `taler-merchant/` | container `taler-hacktivism`: overrides + conf.d + nginx vhost |
-| `taler-bank/` | container `taler-bank-hacktivism`: bank-overrides (libeufin) |
-| `systemd/` | host proxy sockets / caddy drop-in |
-| `firewalld/`, `ports.md` | host edge ports |
+Directories are named to match **live podman container names** where possible.
 
-Package defaults are not mirrored; **site overrides** and relevant drop-ins only.
+| Directory | Live container | Image (typical) |
+|-----------|----------------|-----------------|
+| `taler-hacktivism/` | `taler-hacktivism` | `taler-hacktivism-live:landing` |
+| `taler-hacktivism-bank/` | `taler-hacktivism-bank` | **`taler-hacktivism-banking:live`** |
+| `taler-exchange/` | conf inside exchange container | (see exchange-ansible) |
+| `taler-exchange-ansible/` | **`taler-hacktivism-exchange-ansible`** | `taler-hacktivism-exchange-ansible:landing` |
+| `bank-landing/` `exchange-landing/` `merchant-landing/` | nginx landing snippets | ports 9013–9015 |
+| `koopa-*` apps | `koopa-castopod`, `koopa-bonfire`, … | compose mirrors |
+| `caddy/` `tor/` `firewalld/` `systemd/` | host services | |
 
-```
-configs/taler-{exchange,merchant,bank}/
-  README.md
-  *-overrides.conf
-  …
-```
+**Authoritative running inventory:** `host/overview/LIVE.md`.
+
+Secrets never live here — `SECRETS.md` / `koopa-admin-secrets`.

configs/taler-exchange/README.md

@@ -1,6 +1,12 @@
-# Exchange (GOA) site notes
+# Exchange config (inside ansible container)
 
-Container: **`taler-exchange-hacktivism`** · image tags `localhost/taler-exchange-hacktivism-live:9011` (live) and optional snapshot  
+**Live container:** `taler-hacktivism-exchange-ansible`  
+**Image:** `localhost/taler-hacktivism-exchange-ansible:landing`  
+**Deploy tree on host:** `~/ansible-taler-exchange/` → see **`configs/taler-exchange-ansible/`**
+
+This directory mirrors **exchange software config** (overrides, coins, terms), not the Ansible wrapper itself.
+
+Container: **`taler-hacktivism-exchange-ansible`** · image tags `localhost/taler-hacktivism-exchange-ansible-live:9011` (live) and optional snapshot  
 Host port: **9011** (pasta) · public: **https://exchange.hacktivism.ch/** (Caddy → 9011)
 
 **Snapshot + restore (local tar, no registry):**  

configs/taler-hacktivism-bank/README.md

@@ -1,4 +1,18 @@
-# taler-bank (container `taler-bank-hacktivism`)
+# Bank — live container `taler-hacktivism-bank`
+
+**Reflected from host koopa.**
+
+| Item | Live |
+|------|------|
+| Container | **`taler-hacktivism-bank`** |
+| Image | **`localhost/taler-hacktivism-banking:live`** |
+| Ports | **9012** (API), **9013** (landing) |
+| Site | `https://bank.hacktivism.ch` |
+
+Config path in this repo: **`configs/taler-hacktivism-bank/`** (was `configs/taler-bank/`).  
+Scripts: `scripts/taler-bank/`. Secrets: `koopa-admin-secrets/.../taler-bank/` → `/root/bank-*-password.txt`.
+
+---
 
 Image: `docker.io/library/debian:trixie` + package `libeufin-bank`  
 Publish: **9012/tcp only**  
@@ -81,4 +95,4 @@ nohup /root/auto-confirm-withdrawals.sh --loop 4 >>/var/log/auto-confirm-withdra
 ```
 
 Script: `scripts/taler-bank/auto-confirm-withdrawals.sh`  
-Watches IDs in `/var/www/bank-landing/withdraw.uri` and `withdraw-watch.ids`.
+Watches IDs in `/var/www/bank-landing/withdraw.uri` and `withdraw-watch.ids`.

configs/taler-hacktivism/README.md

@@ -1,6 +1,6 @@
 # taler-merchant (container `taler-hacktivism`)
 
-Image: `localhost/taler-hacktivism-live:9010`  
+Image: `localhost/taler-hacktivism-live:landing`  
 Publish: **9010/tcp only**  
 Labels: `org.hacktivism.service=taler-merchant`, `host_port=9010`, `site=taler.hacktivism.ch`