Move runbooks into domain directories

od-db-backup.md becomes od/db-backup.md -- the hyphen becomes a slash, so
the fetch command is exactly as long to type as before. That mattered: the
length of a hand-typed command is the constraint this repo is organized
around, and a reorganization that lengthened it would have been a net loss.

Scripts deliberately stay flat in scripts/ with their domain prefix.
Everything executable in one directory is the set worth reading before it
runs, and nesting five files by domain would add characters without adding
clarity.

Updates every reference: README Contents (now grouped by directory), the
layout section, both fetch examples, inter-runbook links, and the .NOTES
headers in all five scripts. Verified every markdown link resolves on disk
and that Contents and the filesystem agree in both directions.

Records the naming rule in CONTRIBUTING so the next file lands correctly.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HwcG1jLs1T425QRMxtjxP7

scripts/cg-disable.ps1

@@ -12,7 +12,7 @@
 
 .NOTES
   Run via:  irm rb.godwinsystems.com/scripts/cg-disable.ps1 | iex
-  Referenced by od-smb-cred.md, Step 3.
+  Referenced by od/smb-cred.md, Step 3.
 
   If Credential Guard is still running after reboot, it was enabled with a
   UEFI lock (needs the bcdedit / physical-presence removal), or MDM policy is

scripts/od-backup-check.ps1

@@ -26,7 +26,7 @@
 
   For unattended monitoring, schedule a filled-in LOCAL copy (with <DEST> and the
   heartbeat URL baked in) — keep that copy in the private tier, not here. See
-  od-backup-schedule.md.
+  od/backup-schedule.md.
 
   iex-safe: uses `return`, never `exit` (which would close an interactive
   session). PUBLIC REPO: no client specifics hard-coded; prompt at run time.
@@ -148,4 +148,4 @@ if ($heartbeat) {
     }
 }
 
-if (-not $healthy) { Write-Warning 'Investigate now — see od-backup-schedule.md triage.' }
+if (-not $healthy) { Write-Warning 'Investigate now — see od/backup-schedule.md triage.' }

scripts/od-cfg-acl.ps1

@@ -16,7 +16,7 @@
 
 .NOTES
   Run via:  irm rb.godwinsystems.com/scripts/od-cfg-acl.ps1 | iex
-  Referenced by od-cfg-persist.md, Option B.
+  Referenced by od/cfg-persist.md, Option B.
 
   SECURITY: on direct-connection setups FreeDentalConfig.xml also holds the
   MySQL password (obfuscated but reversible). Widening write access here does

scripts/od-db-backup.ps1

@@ -24,7 +24,7 @@
 
   This is the primary "gold" backup. Pair it with an off-hours mysqldump for a
   portable logical copy and with off-site/immutable retention — see
-  od-db-backup.md.
+  od/db-backup.md.
 
 .NOTES
   Run ON THE DATABASE SERVER, elevated, when no one is using Open Dental: