Add Sombra Residential LLC client + Server2013 docs

- New clients/sombra-residential/CONTEXT.md (server stub, GuruRMM agent, EOL flag)
- credentials.md: pointer to vault for Administrator password

clients/sombra-residential/CONTEXT.md

@@ -0,0 +1,34 @@
+# Sombra Residential LLC — Client Context
+
+**Last updated:** 2026-04-30 (Howard)
+
+## Identity
+
+- Business: Sombra Residential LLC
+- Slug: `sombra-residential`
+
+## Infrastructure
+
+| Resource | Address | Vault path |
+|---|---|---|
+| Server2013 (file/app server) | hostname `Server2013` | `clients/sombra-residential/server2013.sops.yaml` |
+
+## Server2013 quick facts
+
+- **Hostname:** `Server2013`
+- **OS:** Windows Server **2012** (build 9200) — name is just a label; the product is 2012, **EOL 2023-10-10**. Mainstream support ended; running unpatched.
+- **GuruRMM:**
+  - Client: **Sombra Residential LLC** (id `4143369f-de59-42e6-b1a0-e9939aa42a2d`)
+  - Site: **main office** (id `787d497a-eb1d-4468-a8ac-51d3c23954cb`)
+  - Agent: `5383e9c1-56e1-4389-9c89-1991a77bbc3a`, device id `win-e59d7c6c-9bd6-4b49-a892-71788039bf14`
+  - Enrolled: 2026-04-30
+- **Remote access:** ScreenConnect installed (managed by ACG SC instance)
+- **Local accounts:**
+  - `Administrator` — password vaulted at `clients/sombra-residential/server2013.sops.yaml`
+  - `sysadmin` — exists, password TBD (ask Howard or pull from server before next session)
+
+## Open items
+
+- Capture `sysadmin` password into vault.
+- Confirm Server 2012 EOL risk with Mike — recommend a refresh / migration path.
+- Discover and document: workstations, network, primary contact, business purpose. This file is a stub created on initial server enrollment.

credentials.md

@@ -530,6 +530,19 @@ export OP_SERVICE_ACCOUNT_TOKEN="op://Infrastructure/Service Account Auth Token:
 
 ---
 
+## Client - Sombra Residential LLC
+
+### Server2013 (primary server)
+- **Hostname:** Server2013
+- **OS:** Windows Server 2012 (build 9200) — name is just a label; **EOL 2023-10-10**
+- **Remote access:** ScreenConnect (ACG SC instance)
+- **Administrator password:** SOPS `clients/sombra-residential/server2013.sops.yaml` (field `credentials.password`)
+- **sysadmin password:** TBD — pending capture
+- **GuruRMM:** Sombra Residential LLC / main office, agent `5383e9c1-56e1-4389-9c89-1991a77bbc3a`
+- **Full context:** `clients/sombra-residential/CONTEXT.md`
+
+---
+
 ## MSP Tools
 
 ### Syncro (PSA/RMM)