Repository navigation
Add [extra] for affirmative selective deployment: list paths or tags
under a host or group so those entries deploy only there, while the rest
of the vault keeps the usual [include] / [exclude] rules. Other hosts
see them as excluded. [exclude] still wins when both apply, and
[extra] stays independent of allowlist mode. Document the section in
both READMEs.