docs: reference towlion/infra in tutorial and ecosystem

Add automated provisioning tip to tutorial Step 2 and add
Infrastructure CLI section to ecosystem docs.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: baijum

docs/ecosystem.md

@@ -8,6 +8,7 @@ The Towlion GitHub organization serves as a catalog of deployable applications.
 towlion/
   .github              # Organization profile, community health files, and reusable workflows
   platform             # Architecture docs and platform tools
+  infra                # Infrastructure provisioning CLI (OpenTofu)
   app-template         # Template for bootstrapping new apps
   todo-app             # Todo CRUD application
   wit                  # Work Item Tracker (Kanban board)
@@ -32,6 +33,17 @@ The meta repository for the ecosystem. Contains:
 - Developer CLI (`cli/towlion`) — see [CLI reference](cli.md)
 - Infrastructure scripts (blue-green deploy, backup verification, credential rotation)
 
+### Infrastructure CLI ([`towlion/infra`](https://github.com/towlion/infra))
+
+CLI tool for provisioning Towlion servers on DigitalOcean or AWS using [OpenTofu](https://opentofu.org). Creates a Debian server with:
+
+- Firewall (ports 22, 80, 443)
+- 50 GB data volume mounted at `/data`
+- SSH key pair
+- Optional DNS zone with root and wildcard A records
+
+Usage: `./towlion-infra init --provider <aws|digitalocean>` then `./towlion-infra apply`.
+
 ### Application Template ([`towlion/app-template`](https://github.com/towlion/app-template))
 
 A [GitHub Template Repository](https://github.com/towlion/app-template) for creating new applications. Includes:

docs/tutorial.md

@@ -49,6 +49,14 @@ ssh root@YOUR_SERVER_IP
 
 You should see a shell prompt. If this works, you are ready to bootstrap.
 
+!!! tip "Automated provisioning"
+    Instead of creating a server manually, you can use [towlion/infra](https://github.com/towlion/infra) to provision a Debian server with a single command:
+    ```bash
+    ./towlion-infra init --provider digitalocean
+    ./towlion-infra apply --domain example.com
+    ```
+    This creates a server with the correct firewall rules, a data volume, SSH key, and optional DNS — ready for bootstrap. See the [infra README](https://github.com/towlion/infra) for setup and usage.
+
 ## Step 3: Bootstrap the server
 
 SSH into your server as root. Download and run the bootstrap script — no `git` required: