complete matrix documentation

See merge request !47

Next step is to run through the entire todo list and design like
hell.

see team#40755

The "needs reboot and physical" is particularly useful for fleet-wide reboots.

docs(weather): updated steps for fetching latest build

See merge request !46

We also take extra care to point to other places such a list exist to
resolve future omissions.

add Trezor to security key

See merge request tpo/tpa/wiki-replica!45

there were a lot of services in the non-TPA list that were essentially
managed by TPA and that we were just pretending they are
service-admin-managed. A lot of websites, gitlab, btcpayserver, no one
else is taking care of those when shit hits the fan.

See team#29974

the old query relied on the deprecated lsbdistcodename fact and was
somewhat... complicated

the new query can be modified to make counts based of pretty much any
facts including structured facts