docs: redact remaining sensitive data and fix stale service counts

- linux.md: redact sudo password from grep example
- networking.md: update nine→eleven service count in summary
- 01-what-you-need.md: redact real VPS IP from example

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

homelab-mastery/build-guide/with-ai/01-what-you-need.md

@@ -142,7 +142,7 @@ sudo apt install -y curl git nano wget
 
 ## Setting Up Your Cloud VPS (kscloud1)
 
-After creating your VPS on Hetzner, you will get an IP address (something like `5.78.233.28`).
+After creating your VPS on Hetzner, you will get an IP address (something like `5.78.x.x`).
 You connect to it using a tool called SSH.
 
 **Ask your AI:** "What is SSH and how do I connect to my VPS from Ubuntu?"

homelab-mastery/concepts/linux.md

@@ -161,7 +161,7 @@ You used this to run ufw commands non-interactively. In real production environm
 grep "error" /var/log/syslog          # lines containing "error"
 grep -i "error" logfile               # case-insensitive
 grep -n "AUTHENTIK" docker-compose.yml # show line numbers
-grep -r "p12217177" /opt/kitestacks/  # recursive search in directory
+grep -r "search-term" /opt/kitestacks/  # recursive search in directory
 ```
 
 **sed** (stream editor) modifies text:

homelab-mastery/concepts/networking.md

@@ -184,4 +184,4 @@ Without that rule: the homepage container calls `host.docker.internal:8000` →
 
 ## What to Say About Networking
 
-> *"The homelab uses Cloudflare Tunnel for all inbound traffic, which means no ports are open on the home router. All nine public subdomains have DNS pointing to Cloudflare, and a cloudflared connector on each host maintains a persistent outbound tunnel. Internally, services communicate over a Docker bridge network using container DNS. A Tailscale overlay network connects monk and kscloud1 for private database access — the shared Authentik Postgres is bound only to the Tailscale interface so it's never exposed to the public internet."*
+> *"The homelab uses Cloudflare Tunnel for all inbound traffic, which means no ports are open on the home router. All eleven public subdomains have DNS pointing to Cloudflare, and a cloudflared connector on each host maintains a persistent outbound tunnel. Internally, services communicate over a Docker bridge network using container DNS. A Tailscale overlay network connects monk and kscloud1 for private database access — the shared Authentik Postgres is bound only to the Tailscale interface so it's never exposed to the public internet."*