docs: reflect live koopa state (inventory + exchange-ansible)

Capture what is actually running on host koopa: podman names/ports,
Caddy vhosts, and hernani paths. Authoritative snapshot:
host/overview/LIVE.md.

Rename docs to live container taler-hacktivism-exchange-ansible
(not the short taler-exchange-hacktivism label). Add public-only
mirror of ~/ansible-taler-exchange deploy helpers (no secrets.yml).

configs/taler-exchange-ansible/deploy-hacktivism-goa.sh

@@ -0,0 +1,25 @@
+#!/bin/sh
+# Deploy event-currency GOA exchange (regional-currency flow + systemd).
+# Prerequisites on koopa:
+#   1) ./run-container-koopa.sh   # systemd container, port 9011
+#   2) this script
+# Inventory: ansible_connection=podman
+set -eu
+cd "$(dirname "$0")"
+export PATH="${HOME}/venv-ansible/bin:${PATH}"
+export ANSIBLE_HOST_KEY_CHECKING=False
+if [ ! -f vault_pass.txt ]; then
+  echo unused > vault_pass.txt
+fi
+
+# Refuse obvious non-systemd targets early
+if ! podman exec taler-hacktivism-exchange-ansible cat /proc/1/comm 2>/dev/null | grep -qx systemd; then
+  echo "error: container PID1 is not systemd. Run ./run-container-koopa.sh first." >&2
+  exit 1
+fi
+
+exec ansible-playbook -v \
+  --limit taler-hacktivism-exchange-ansible \
+  -e @inventories/host_vars/taler-hacktivism-exchange-ansible/public.yml \
+  -e @inventories/host_vars/taler-hacktivism-exchange-ansible/secrets.yml \
+  playbooks/setup-hacktivism-goa.yml