- Create scripts/infra-monitoring.sh with all targets/ports/paths in code
- Add -k flag for PVE API (self-signed certs)
- Probe Docker Stats and PVE Exporter via SSH (bind to 127.0.0.1)
- Non-zero exit with named failures
- Add tests/test_infra_monitoring.py for port drift detection
- Prove happy path + broken target
Fixes: infra-monitoring-probe-targets-drift-20260917