Add standalone Linux miner scanner

OPERATIONS.md

@@ -113,3 +113,25 @@ Then rebuild backend if backend files were involved.
 - Check Git status before and after every patch.
 - Commit and push after every stable working change.
 - Use /system-health after major changes.
+
+## Linux read-only miner scanner
+
+A standalone Linux scanner is included at:
+
+scripts/linux-miner-scanner.py
+
+Run it from a Linux machine that can reach the miner networks. CT 306 may not have routes to the miner VLANs, so run this on the correct network.
+
+Example:
+
+python3 scripts/linux-miner-scanner.py --cidr 10.30.0.0/22 --cidr 10.80.0.0/22 --csv miner-scan.csv --json miner-scan.json
+
+Single miner test:
+
+python3 scripts/linux-miner-scanner.py --ip 10.30.0.138
+
+Port check only:
+
+python3 scripts/linux-miner-scanner.py --cidr 10.30.0.0/22 --no-query
+
+This scanner is read-only. It checks legacy port 4028 and API3 port 4433.