docs(guide): add platform.production-checks + new DEVOPS section (backups, security)

- platform.production-checks: the daily prod health sweep (deep actuator/critical
  set, Loki ERROR+5xx top-5, backup freshness, ClamAV per-VM) -> 06:30 email report.
- NEW DevOps nav section in the reader (SPECIAL + section block + expandFor).
- devops.backups: pg_dumpall->Swift nightly job, verify/restore, gaps (#13/#14/#15).
- devops.security: ClamAV/firewall posture from the 2026-07-02 sweep — FAILING,
  remediation in #16 (Critical, PCI CDE) / #17. Reconciler: devops = concept docs.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

scripts/coverage-reconcile.py

@@ -17,7 +17,7 @@ PRODUCT_APPS = {
     "profile","recon","reports","transactions","vault",
 }
 # guide app-prefixes that are NOT code-derived (concept / process docs) — skip in the code diff
-NON_CODE_APPS = {"platform","technical","processes"}
+NON_CODE_APPS = {"platform","devops","technical","processes"}
 # the 5 role-tabs expected on a product module
 PRODUCT_TABS = {"Customer","Internal","Architect","Testing","Claude"}
 # dir-name (minus hiveops-) → guide app/service key, where they differ