Populate site with real CV data; restyle OG subtitle

Real career history (Woolworths, Virtus Health, Linde, ELGAS, Darktime),
cloud-heavy skills matrix, education, LinkedIn, Sydney location, and
projects mapped to actual work. OG subtitle now smaller italic serif.

src/data/skills.ts

@@ -10,77 +10,82 @@ export type SkillGroup = {
 
 export const skills: SkillGroup[] = [
   {
-    title: "Platform Engineering",
+    title: "Cloud & Identity",
+    blurb: "Hybrid estates across the major clouds, with identity done properly.",
+    items: [
+      "Azure",
+      "Entra ID",
+      "Intune",
+      "AWS",
+      "GCP",
+      "Microsoft 365",
+      "Azure Blob / S3",
+    ],
+  },
+  {
+    title: "Platform & Virtualization",
     blurb: "Kubernetes platforms designed to be reasoned about and recovered.",
     items: [
       "Kubernetes",
-      "Talos Linux",
       "OpenShift",
+      "Talos Linux",
+      "vSphere / VMware ESXi",
+      "Proxmox",
+      "containerd",
       "ArgoCD / GitOps",
       "Helm & Kustomize",
-      "Cilium / flannel",
-      "Gateway API & Ingress",
     ],
   },
   {
-    title: "Infrastructure Automation",
-    blurb: "Removing the manual step entirely, not documenting it.",
+    title: "Automation & IaC",
+    blurb: "Single-touch deployments — removing the manual step, not documenting it.",
     items: [
-      "Ansible",
-      "AWX",
-      "GitOps pipelines",
-      "Renovate",
-      "Image pre-pull & templating",
-      "Reproducible cluster bring-up",
-    ],
-  },
-  {
-    title: "Linux & Systems",
-    blurb: "From the hypervisor up to the workload.",
-    items: [
-      "Debian / RHEL",
-      "systemd",
-      "Proxmox / KVM",
-      "PCIe / GPU passthrough",
-      "LVM & block storage",
-      "restic / SMB backup",
-      "Bash & PowerShell",
+      "Ansible / AWX",
+      "PowerShell (PowerCLI)",
+      "Python",
+      "Bash / Shell",
+      "Terraform",
+      "Image pre-pull & air-gapped registries (ACR / NVCR)",
+      "Secrets management",
     ],
   },
   {
     title: "Networking & Security",
-    blurb: "Default-deny, least-privilege, and a small attack surface.",
+    blurb: "Default-deny, segmentation, and a small attack surface.",
     items: [
-      "Split-horizon DNS",
-      "Cloudflare Tunnel",
-      "Reverse proxy (Traefik / nginx)",
-      "NetworkPolicies",
-      "OIDC / SSO (Authentik)",
-      "Secrets (Vault / Infisical / ESO)",
-      "TLS & cert-manager",
+      "SD-WAN",
+      "802.1Q VLAN segmentation",
+      "ACLs / IPSec / RADIUS",
+      "Aruba ClearPass",
+      "Palo Alto / FortiGate",
+      "Firewall policy governance",
+      "RBAC · 2FA / SSO",
     ],
   },
   {
-    title: "Observability",
-    blurb: "Knowing the system is healthy, not just the pods.",
+    title: "Observability & Ops",
+    blurb: "Knowing the system is healthy — and the GPUs with it.",
     items: [
       "Prometheus",
       "Grafana",
-      "Alertmanager",
-      "node-exporter / kube-state-metrics",
-      "ServiceMonitors",
+      "DCGM Exporter",
+      "PRTG / LibreNMS",
+      "AWX job reporting",
+      "Veeam backup",
+      "ITIL processes",
     ],
   },
   {
-    title: "AI & GPU Infrastructure",
-    blurb: "Serving vision and language models on real hardware.",
+    title: "Edge AI & GPU",
+    blurb: "Serving vision and language models on real hardware at the edge.",
     items: [
       "NVIDIA GPU Operator",
-      "Multus / SR-IOV",
+      "GPU passthrough (ESXi, as code)",
+      "GPU readiness probing & watchdogs",
+      "Pod lifecycle management",
       "YOLO / computer-vision inference",
       "Local LLM serving (llama.cpp)",
-      "Agent frameworks & tooling",
-      "Hardware-isolated workloads (Kata)",
+      "Edge Kubernetes",
     ],
   },
 ];