feat(lasuite): add calendars service deployment manifests

Add K8s manifests for calendars backend, frontend (Caddy), CalDAV
server, and Celery worker. Wire Pingora routing for cal.sunbeam.pt
with path-based backend/caldav/static splits. Add OAuth2Client for
OIDC, VaultDynamicSecret for DB credentials, VaultStaticSecret for
Django/CalDAV keys, and TLS cert coverage for the cal subdomain.
Register calendars in the integration service gaufre widget.

base/lasuite/calendars-config.yaml

@@ -0,0 +1,30 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: calendars-config
+  namespace: lasuite
+data:
+  DJANGO_CONFIGURATION: Production
+  DJANGO_SETTINGS_MODULE: calendars.settings
+  DJANGO_ALLOWED_HOSTS: cal.DOMAIN_SUFFIX,calendars-backend.lasuite.svc.cluster.local,localhost
+  DJANGO_CSRF_TRUSTED_ORIGINS: https://cal.DOMAIN_SUFFIX
+  DB_NAME: calendars_db
+  DB_USER: calendars
+  CALDAV_URL: http://calendars-caldav.lasuite.svc.cluster.local:80
+  CALDAV_CALLBACK_BASE_URL: http://calendars-backend.lasuite.svc.cluster.local:8000
+  REDIS_URL: redis://valkey.data.svc.cluster.local:6379/5
+  DRAMATIQ_BROKER_URL: redis://valkey.data.svc.cluster.local:6379/5
+  DRAMATIQ_RESULT_BACKEND_URL: redis://valkey.data.svc.cluster.local:6379/6
+  APP_URL: https://cal.DOMAIN_SUFFIX
+  DEFAULT_FROM_EMAIL: noreply@sunbeam.pt
+  CALENDAR_INVITATION_FROM_EMAIL: calendar@sunbeam.pt
+  CALENDAR_ITIP_ENABLED: "True"
+  LOGIN_REDIRECT_URL: /
+  LOGIN_REDIRECT_URL_FAILURE: /
+  LOGOUT_REDIRECT_URL: /
+  FRONTEND_THEME: sunbeam
+  FRONTEND_HIDE_GAUFRE: "False"
+  NEXT_PUBLIC_VISIO_BASE_URL: https://meet.DOMAIN_SUFFIX
+  FRONTEND_CSS_URL: https://integration.DOMAIN_SUFFIX/api/v2/theme.css
+  OIDC_USERINFO_FULLNAME_FIELDS: given_name,family_name
+  THEME_CUSTOMIZATION_FILE_PATH: /app/theme.json