firefox doesn't place the downloaded screenshots where I thought it
would. I should have looked at the content before sending.

This adds this information in each client configuration section that the
email password is different than the one used for logging in to db.tpo.
Hopefully it'll help more people better understand the procedure.

This should help ppl better locate the field. There is often confusion
between the `Change Password` and `Change mail password` fields.

I *think* the problem was the lists weren't indented, but whatever,
this works.

service/lists: add pii redaction instructions

See merge request !69

see tpo/tpa/team#42002

refs tails-sysadmin#18173

That'll make it easier to identify what are the obsolete packages in the
output. The openmetrics output is not needed during investigation.

This should be slightly more readable

- be explicit about how to handle naming conflicts
- remove non-goals
- describe when and how to create tails- and tpa-specific profiles

refs team#41948

credit to lavamind for this procedure, see team#41396#note_2966380

See: team#41969

Closes: tpo/tpa/puppet-hiera-enc#1

cf. team#41991