fix: restore nik4nao.home.arpa DNS entry -- wrongly removed as "orphaned"

This points at nik-debian's raw IP (192.168.7.183) for a host-level SMB/Samba
share, not a Kubernetes Service. Stage 3 removed it based on "no Certificate/
Ingress/IngressRoute references it" -- the wrong test for a non-HTTP,
non-Kubernetes service that was never going to have one. Broke real SMB
access. Restored to both Pi-hole values files in their original position.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

REFACTOR_PLAN.md

@@ -176,7 +176,14 @@ Per the "trace references before declaring obsolete" rule — **none of the
 invisible to Argo CD. The only things that look genuinely obsolete or
 redundant are:
 
-- `nik4nao.home.arpa` DNS entry (both pihole values files) — no backing resource found anywhere.
+- ~~`nik4nao.home.arpa` DNS entry~~ — **WRONG, corrected 2026-07-23**: this
+  points at `192.168.7.183` (nik-debian's raw IP) for a host-level SMB/Samba
+  share, not a Kubernetes Service — there was never going to be a
+  Certificate/Ingress/IngressRoute for it, so "no K8s resource references it"
+  was the wrong test entirely. It was removed from both pihole values files
+  and broke real SMB access; restored. Lesson: that specific check only
+  proves a hostname isn't routed through Traefik, not that it's unused —
+  doesn't apply to raw-IP entries for non-HTTP/non-K8s services.
 - `ansible/ansible.cfg` — not obsolete exactly, but its only real-world effect today is negative (breaks documented commands); candidate for deletion/merge into the root cfg.
 - `ansible/roles/nvidia/templates/k3s-containerd-config.toml.j2` — orphaned template, either finish wiring it up or remove it once GPU passthrough status is confirmed live.
 - `.DS_Store` at repo root and in `config/` — should never have been committed; harmless but should be `git rm --cached`.

values/pihole-debian.yaml

@@ -37,6 +37,7 @@ dnsmasq:
     - address=/gitea.home.arpa/192.168.7.77
     - address=/pihole.home.arpa/192.168.7.77
     - address=/home.arpa/192.168.7.77
+    - address=/nik4nao.home.arpa/192.168.7.183
     - address=/dashy.home.arpa/192.168.7.77
     - address=/jellyfin.home.arpa/192.168.7.77
     - address=/qbittorrent.home.arpa/192.168.7.77

values/pihole.yaml

@@ -68,6 +68,7 @@ dnsmasq:
     - address=/gitea.home.arpa/192.168.7.77
     - address=/pihole.home.arpa/192.168.7.77
     - address=/home.arpa/192.168.7.77
+    - address=/nik4nao.home.arpa/192.168.7.183
     - address=/dashy.home.arpa/192.168.7.77
     - address=/jellyfin.home.arpa/192.168.7.77
     - address=/qbittorrent.home.arpa/192.168.7.77