chore: initial skeleton

- docs/architecture.md: native rewrite plan (5 services + control plane,
  Active-Active cluster like nmg, Floating-IP for HTTP ingress)
- cmd/edgeguard-{api,scheduler,ctl}: minimal Gin + CLI stubs
- packaging/debian/edgeguard-{api,ui,meta}: control + maintainer scripts
- deploy/systemd/edgeguard-api.service + edgeguard-scheduler.service
  with hardening defaults
- Makefile: build / cross-compile (amd64+arm64) / deb / publish targets
- scripts/install.sh + scripts/apt-repo/build-package.sh stubs

packaging/debian/edgeguard-api/DEBIAN/postrm

@@ -0,0 +1,24 @@
+#!/bin/bash
+set -e
+
+case "$1" in
+    purge)
+        # Only on purge: remove user, configs, state.
+        if getent passwd edgeguard >/dev/null; then
+            deluser --quiet edgeguard >/dev/null 2>&1 || true
+        fi
+        rm -rf /etc/edgeguard /var/lib/edgeguard /var/log/edgeguard
+        ;;
+
+    remove|upgrade|failed-upgrade|abort-install|abort-upgrade|disappear)
+        ;;
+
+    *)
+        echo "postrm called with unknown argument \`$1'" >&2
+        exit 1
+        ;;
+esac
+
+#DEBHELPER#
+
+exit 0