feat(wiki): isolate silverbullet pvc, add pre-commit wall, family group, and audit alert

terraform/authentik.tf

@@ -46,6 +46,17 @@ resource "authentik_group" "verein_mitglieder" {
   is_superuser = false
 }
 
+data "authentik_user" "amy" {
+  username = "Amy"
+}
+
+resource "authentik_group" "family" {
+  name         = "family"
+  is_superuser = false
+  users        = [data.authentik_user.amy.pk]
+}
+
+
 # --- Flows: Authorization, Invalidation & Custom Invitation Flow ---
 
 data "authentik_flow" "default_authorization_flow" {
@@ -740,6 +751,13 @@ resource "authentik_policy_binding" "silverbullet_admin_only" {
   order  = 0
 }
 
+resource "authentik_policy_binding" "silverbullet_family" {
+  target = authentik_application.silverbullet.uuid
+  group  = authentik_group.family.id
+  order  = 1
+}
+
+
 # 2. Shared & Member Applications (Accessible to all authenticated users)
 resource "authentik_policy_binding" "grafana_users" {
   target = authentik_application.grafana.uuid