feat(lasuite): add calendars service deployment manifests

Add K8s manifests for calendars backend, frontend (Caddy), CalDAV
server, and Celery worker. Wire Pingora routing for cal.sunbeam.pt
with path-based backend/caldav/static splits. Add OAuth2Client for
OIDC, VaultDynamicSecret for DB credentials, VaultStaticSecret for
Django/CalDAV keys, and TLS cert coverage for the cal subdomain.
Register calendars in the integration service gaufre widget.

base/lasuite/calendars-theme-configmap.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: calendars-theme
+  namespace: lasuite
+data:
+  theme.json: |
+    {
+      "css_url": "https://integration.DOMAIN_SUFFIX/api/v2/theme.css",
+      "waffle": {
+        "apiUrl": "https://integration.DOMAIN_SUFFIX/api/v2/services.json",
+        "widgetPath": "https://integration.DOMAIN_SUFFIX/api/v2/lagaufre.js",
+        "label": "O Estúdio",
+        "closeLabel": "Fechar",
+        "newWindowLabelSuffix": " · nova janela"
+      }
+    }