release 1.13.6: env-only machine paths and SSH hosts

Load ~/.config/taler-monitoring/env (taler-monitoring-env profiles)
before suite defaults. Drop hardcoded operator homes and host aliases
from scripts; apply/staging/www/secrets/wallet via env.

site-gen/caddy-monitoring-handles.snippet

@@ -28,10 +28,10 @@
 #   /var/www/monitoring-sites/taler.hacktivism.ch/taler-monitoring-*/index.html
 #
 # Live apply on koopa (absolute path — ~ as root is /root):
-#   sudo /home/hernani/koopa-caddy/apply-monitoring-live.sh
+#   sudo ${APPLY_MONITORING_LIVE}
 # Runtime-only (no sudo; hernani admin API):
 #   curl -g -X POST http://[::1]:2019/load -H 'Content-Type: text/caddyfile' \
-#     --data-binary @/home/hernani/koopa-caddy/Caddyfile
+#     --data-binary @${KOOPA_CADDY_DIR}/Caddyfile
 
 # --- only inside taler.hacktivism.ch { ... } ---
     @mon_bare path /monitoring /monitoring_err \