docs: new root as prior history lost (orphan + GC); ~215 commits not recoverable

host/firewalld/list-all.txt

@@ -0,0 +1,19 @@
+public (default, active)
+  target: default
+  ingress-priority: 0
+  egress-priority: 0
+  icmp-block-inversion: no
+  interfaces: eno1
+  sources: 
+  services: dhcpv6-client ssh
+  ports: 80/tcp 443/tcp 8080/tcp 9000/tcp 9001/tcp 23235/tcp 9200/tcp
+  protocols: 
+  forward: yes
+  masquerade: no
+  forward-ports: 
+  source-ports: 
+  icmp-blocks: 
+  rich rules: 
+
+# Snapshot note (2026-07-10): 9200/tcp = Forgejo git-SSH (verified open).
+# Re-export as root: firewall-cmd --list-all > host/firewalld/list-all.txt