Improve DevOps onboarding

  • password to mailing lists is hidden in misc/additional-credentials.vault
  • staff role should be assigned in archweb