Review 3 how-to docs and fix update-tailscale-acls inaccuracies

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

docs/changelog.d/doc-review-2025-02-25.doc.md

@@ -0,0 +1 @@
+Review 3 how-to docs: stamp provision-authentik-database and use-pypi-proxy, fix wrong policy path and misleading --yes in update-tailscale-acls

docs/how-to/authentik/provision-authentik-database.md

@@ -1,6 +1,7 @@
 ---
 title: Provision Authentik Database
 modified: 2026-02-20
+last-reviewed: 2026-02-25
 tags:
   - how-to
   - authentik

docs/how-to/configuration/update-tailscale-acls.md

@@ -1,6 +1,7 @@
 ---
 title: Update Tailscale ACLs
-modified: 2026-02-07
+modified: 2026-02-25
+last-reviewed: 2026-02-25
 tags:
   - how-to
   - tailscale
@@ -18,7 +19,7 @@ How to modify Tailscale access control policies for the tailnet.
 
 ## Edit the Policy
 
-The ACL policy lives in `pulumi/policy.hujson` (HuJSON format with comments).
+The ACL policy lives in `pulumi/tailscale/policy.hujson` (HuJSON format with comments).
 
 Common changes:
 
@@ -65,11 +66,8 @@ Common changes:
 # Preview changes (always do this first)
 mise run tailnet-preview
 
-# Apply changes
+# Apply changes (auto-confirms via --yes)
 mise run tailnet-up
-
-# Skip confirmation prompt
-mise run tailnet-up -- --yes
 ```
 
 ## Verify
@@ -126,4 +124,5 @@ ACL changes are applied immediately. If a device isn't following new rules, try
 ## Related
 
 - [[tailscale]] - ACL reference and current configuration
+- [[pulumi]] - Pulumi IaC reference
 - [[routing]] - Service routing

docs/how-to/configuration/use-pypi-proxy.md

@@ -1,6 +1,7 @@
 ---
 title: Use PyPI Proxy
 modified: 2026-02-07
+last-reviewed: 2026-02-25
 tags:
   - how-to
   - python