docs(plugins, tools/build-docs): correct version_added, expose api_key_file default, restructure docs nav

Three review-driven fixes after eyeballing the rendered docs site at
https://linuxfabrik.github.io/lfops/.

version_added audit

Cross-checked every plugin's `version_added` against the actual first
release tag that shipped the file. Five entries were wrong:

* `lvm_pv`: claimed `11.0.0` (does not exist), really shipped in v6.0.0.
* `nextcloud_occ_app` / `nextcloud_occ_app_config` / `nextcloud_occ_system_config`:
  claimed `2.0.1`, really shipped in v6.0.0.
* `combine_lod` filter: claimed `2.0.1`, really shipped in v3.0.0.

The nine UptimeRobot modules carried `6.1.0`, which doesn't exist either;
moved them to `6.0.2` (latest released v6.0.1 plus one patch level), the
realistic next-release placeholder until the actual release decision is
made.

UptimeRobot api_key_file default

The argument_spec carried no default for `api_key_file`, so the rendered
docs (and `ansible-doc`) both showed an empty Default column even though
the runtime resolver in `module_utils/uptimerobot.py` falls back to
`~/.uptimerobot`. Set `default='~/.uptimerobot'` on the argument across
all nine modules and lift the existing "Default C(~/.uptimerobot)" from
the description into the proper YAML `default:` field. Behaviour is
unchanged: explicit `api_key`, then `api_key_file` (now always populated
with at least the default), then `UPTIMEROBOT_API_KEY` env var. Verified
with a no-op `--check` against the 038 inventory: 0 changed.

Docs site nav

The previous nav wrapped "Home / Compatibility / Playbooks / Security /
Contributing" inside a section also called "Linuxfabrik LFOps", which
duplicated the site_name banner in the left sidebar. Flatten those five
entries to the top level. Plugins are now grouped properly:

  Plugins:
    Modules:    <every modules/*.py with a DOCUMENTATION block>
    Lookup:     <bitwarden_item>
    Filter:     <combine_lod>

That removes the awkward `bitwarden_item (lookup)` / `(filter)` suffixes
the flat layout needed for disambiguation.

Author: markuslf

.pre-commit-config.yaml

@@ -34,6 +34,11 @@ repos:
           - '--severity-level=low'
           - '--confidence-level=low'
           - '--skip=B110,B112,B311'  # graceful-degradation patterns, non-crypto randomness
+        # `plugins/modules/ipa*.py` is vendored ansible-freeipa code; bandit
+        # false-positives on the project's own code style (`shell=dict(...)`
+        # in argument_spec triggers B604, the literal `'on_create'` sentinel
+        # triggers B105). Out of scope for in-tree review.
+        exclude: '^plugins/modules/ipa.*\.py$'
         types_or: ['python']
 
   - repo: 'https://github.com/jendrikseipp/vulture'

plugins/modules/ipagroup.py

@@ -37,6 +37,7 @@
 ---
 module: ipagroup
 short_description: Manage FreeIPA groups
+version_added: "6.0.0"
 description: Manage FreeIPA groups
 extends_documentation_fragment:
   - ipamodule_base_docs

plugins/modules/ipahbacrule.py

@@ -37,6 +37,7 @@
 ---
 module: ipahbacrule
 short_description: Manage FreeIPA HBAC rules
+version_added: "6.0.0"
 description: Manage FreeIPA HBAC rules
 extends_documentation_fragment:
   - ipamodule_base_docs

plugins/modules/ipahostgroup.py

@@ -38,6 +38,7 @@
 ---
 module: ipahostgroup
 short_description: Manage FreeIPA hostgroups
+version_added: "6.0.0"
 description: Manage FreeIPA hostgroups
 extends_documentation_fragment:
   - ipamodule_base_docs

plugins/modules/ipapwpolicy.py

@@ -38,6 +38,7 @@
 ---
 module: ipapwpolicy
 short_description: Manage FreeIPA pwpolicies
+version_added: "6.0.0"
 description: Manage FreeIPA pwpolicies
 extends_documentation_fragment:
   - ipamodule_base_docs

plugins/modules/ipasudocmd.py

@@ -39,6 +39,7 @@
 ---
 module: ipasudocmd
 short_description: Manage FreeIPA sudo command
+version_added: "6.0.0"
 description: Manage FreeIPA sudo command
 extends_documentation_fragment:
   - ipamodule_base_docs

plugins/modules/ipasudocmdgroup.py

@@ -39,6 +39,7 @@
 ---
 module: ipasudocmdgroup
 short_description: Manage FreeIPA sudocmd groups
+version_added: "6.0.0"
 description: Manage FreeIPA sudocmd groups
 extends_documentation_fragment:
   - ipamodule_base_docs

plugins/modules/ipasudorule.py

@@ -38,6 +38,7 @@
 ---
 module: ipasudorule
 short_description: Manage FreeIPA sudo rules
+version_added: "6.0.0"
 description: Manage FreeIPA sudo rules
 extends_documentation_fragment:
   - ipamodule_base_docs

plugins/modules/ipauser.py

@@ -37,6 +37,7 @@
 ---
 module: ipauser
 short_description: Manage FreeIPA users
+version_added: "6.0.0"
 description: Manage FreeIPA users
 extends_documentation_fragment:
   - ipamodule_base_docs

plugins/modules/sqlite_query.py

@@ -14,6 +14,7 @@
 ---
 module: sqlite
 short_description: Run SQLite queries
+version_added: "2.0.0"
 description:
    - Runs arbitrary SQLite queries.
 options: