feat(catalog): sync 5 new Bicep modules; fix docs for broken /data hot-reload

- Refreshed bicep_modules_catalog.json from ACR (27 -> 32 modules): adds
  elasticpool, managedidentity, signalr, testmodule, virtualnetworks.
- Corrected README/EDITOR_SETUP: production ilsp.nomad has no /data volume
  mount (the Nomad client disables raw Docker bind mounts), so
  scripts/push_catalogs.sh + POST /reload silently no-op in prod. Catalog
  updates require commit + push (Gitea Actions rebuild + Nomad redeploy).
  /data hot-reload still works for local dev via `make run-with-data`.

README.md

@@ -31,9 +31,14 @@ make health     # curl health endpoint
 
 ## Updating catalogs
 
+Catalogs are baked into the Docker image at build time — commit + push to update
+production (see [EDITOR_SETUP.md](EDITOR_SETUP.md#updating-catalogs) for the full
+workflow and a note on why `push_catalogs.sh` / `/reload` don't take effect in prod).
+
 ```bash
 python3 scripts/sync_pipeline_templates.py  # scan AzDO + GHA template repos
-bash scripts/push_catalogs.sh               # scp to server + /reload
+python3 scripts/sync_bicep_modules.py       # from DevOpsMCP repo — needs az CLI + ACR access
+git add *_catalog.json && git commit -m "chore: refresh catalogs" && git push
 ```
 
 ## Deploy