feat(lasuite): add calendars service deployment manifests

Add K8s manifests for calendars backend, frontend (Caddy), CalDAV
server, and Celery worker. Wire Pingora routing for cal.sunbeam.pt
with path-based backend/caldav/static splits. Add OAuth2Client for
OIDC, VaultDynamicSecret for DB credentials, VaultStaticSecret for
Django/CalDAV keys, and TLS cert coverage for the cal subdomain.
Register calendars in the integration service gaufre widget.

base/ingress/pingora-config.yaml

@@ -232,6 +232,46 @@ data:
     backend     = "http://livekit-server.media.svc.cluster.local:80"
     websocket   = true
 
+    [[routes]]
+    host_prefix = "cal"
+    backend     = "http://calendars-frontend.lasuite.svc.cluster.local:80"
+
+      [[routes.paths]]
+      prefix  = "/api/"
+      backend = "http://calendars-backend.lasuite.svc.cluster.local:80"
+
+      [[routes.paths]]
+      prefix  = "/admin/"
+      backend = "http://calendars-backend.lasuite.svc.cluster.local:80"
+
+      [[routes.paths]]
+      prefix  = "/static/"
+      backend = "http://calendars-backend.lasuite.svc.cluster.local:80"
+
+      [[routes.paths]]
+      prefix  = "/caldav"
+      backend = "http://calendars-backend.lasuite.svc.cluster.local:80"
+
+      [[routes.paths]]
+      prefix  = "/.well-known/caldav"
+      backend = "http://calendars-backend.lasuite.svc.cluster.local:80"
+
+      [[routes.paths]]
+      prefix  = "/rsvp/"
+      backend = "http://calendars-backend.lasuite.svc.cluster.local:80"
+
+      [[routes.paths]]
+      prefix  = "/ical/"
+      backend = "http://calendars-backend.lasuite.svc.cluster.local:80"
+
+      [[routes.paths]]
+      prefix  = "/external_api/"
+      backend = "http://calendars-backend.lasuite.svc.cluster.local:80"
+
+      [[routes.paths]]
+      prefix  = "/__"
+      backend = "http://calendars-backend.lasuite.svc.cluster.local:80"
+
     [[routes]]
     host_prefix = "s3"
     backend     = "http://seaweedfs-filer.storage.svc.cluster.local:8333"