Initialize Aidoit v0.1 monorepo

docs/decisions/0001-modular-monolith.md

@@ -0,0 +1,18 @@
+# ADR 0001: Start as a modular monolith
+
+## Status
+
+Accepted
+
+## Decision
+
+The first production version uses a single FastAPI deployment with explicit
+module boundaries.
+
+## Reasons
+
+- one operator
+- easier local development
+- simpler deployment and backups
+- no premature distributed systems complexity
+- modules can be extracted later when justified by real load or isolation needs

docs/decisions/0002-single-user-security.md

@@ -0,0 +1,18 @@
+# ADR 0002: Single-user security model
+
+## Status
+
+Accepted
+
+## Decision
+
+Aidoit is single-user software, but no sensitive endpoint is anonymously
+accessible in production.
+
+Initial access:
+
+- Tailscale for private network access
+- bearer token for development
+- later PocketID or Authentik for browser login
+- separate execution permissions for every AI team
+- immutable audit records for tool calls and infrastructure changes