feat(cv): three technology domains + workforce layer

[CybotTM]

Summary

Re-frames the CTO scope on both public CVs as three clearly separated technology domains plus a workforce-enablement layer, and corrects two earlier inaccuracies.

Three technology domains, strategic AND operational, continuous since 2015

1. Standard stack for enterprise customer systems — what customer projects need to run TYPO3/Magento at scale: AWS/STACKIT, MariaDB/MySQL, Redis/Valkey, Traefik, nginx, php-fpm, RabbitMQ, Solr; observability via New Relic, Sentry, Instana; analytics via Matomo; standardised per-tenant compose stacks.
2. Developer platform — GitLab (self-hosted, admin), Jira Server on-prem, Confluence Cloud, Concourse CI, HashiCorp Vault, Matrix/Synapse/Element, Bitwarden, Snipe-IT, Google Workspace, Windows AD, Claude Code + agentic skill marketplace + Composer distribution.
3. Internal IT platform — Personio, HubSpot, Windows AD, Proxmox VE + Proxmox Backup (formerly VMware + Acronis), OPNsense firewall (formerly VM, now hardware), ESET endpoint protection.

Workforce-enablement layer (cross-cutting)

• Standardised laptop fleet (Apple, Framework, Lenovo; formerly Fujitsu until EU exit Jan 2024)
• Desktop-to-mobile migration completed before 2020 — validated by loss-free transition into mobile work during the first Corona lockdown
• Continuous WiFi build-out to WiFi 6e (Ubiquiti U7-PRO) and WiFi 7 (U7-PRO XG); segmented VLANs; OPNsense + ESET
• Full asset-inventory ownership: 350+ services, 600+ hardware items, 370+ user accounts, 70+ licenses, 37 domains

Corrections

• Senior Developer (2008–2018) now reflects parallel strategic and operational co-design of developer platform and customer-system standard stack — not only TYPO3 extension dev work.
• Head of Operations / Teamleiter Support (2011–2016) scope clarified as customer-project support leadership (the role Tobias Hein holds today).
• 2019–2023 Enrico phase corrected: the strategic AND operational platform responsibility remained with the CTO throughout; Enrico provided operational support, not a separate responsibility layer.

Files

• src/cv-executive.de.md — profile paragraph, role block, Wirkung bullets restructured
• src/cv-technical.de.md — role block, Beiträge restructured into three explicit domain sections + cross-cutting bullets

private/cv-full.private.md updated in parallel (outside this repo).

Test plan

• make build succeeds; both HTML + PDF artefacts regenerated (Executive 55 KB, Technical 66 KB)
• Signed commit (SSH ED25519, SHA256:NOxv8dcZlMFz3wrLdHILVNSnF6xskqAjN3bnn0i7K30)
• Branch rebased on top of latest main
• Visual spot-check of public/cv-*.pdf before merge