vpskit hardens VPS, deploys Docker apps

This is the kind of utility that saves solo operators a lot of yak-shaving, but it also concentrates plenty of trust in one script. The upside is a reproducible baseline for shipping fast; the downside is thinking “hardened” means “hands-off.” It bundles the unglamorous steps people usually skip: OS updates, SSH key auth, firewall setup, fail2ban, Docker, reverse proxying, and unattended security updates. The real value is standardization for self-hosters and indie devs who want a clean VPS baseline without maintaining a personal checklist, but it is still infrastructure, not magic security; secrets handling, backups, port exposure, and app-level hardening remain on the operator.