feat(lasuite): add calendars service deployment manifests

Add K8s manifests for calendars backend, frontend (Caddy), CalDAV
server, and Celery worker. Wire Pingora routing for cal.sunbeam.pt
with path-based backend/caldav/static splits. Add OAuth2Client for
OIDC, VaultDynamicSecret for DB credentials, VaultStaticSecret for
Django/CalDAV keys, and TLS cert coverage for the cal subdomain.
Register calendars in the integration service gaufre widget.

base/lasuite/integration-deployment.yaml

@@ -29,6 +29,16 @@ data:
           "name": "Drive",
           "url": "https://drive.DOMAIN_SUFFIX",
           "logo": "https://integration.DOMAIN_SUFFIX/logos/drive.svg?v=1"
+        },
+        {
+          "name": "Account",
+          "url": "https://auth.DOMAIN_SUFFIX",
+          "logo": "https://integration.DOMAIN_SUFFIX/logos/account.svg?v=1"
+        },
+        {
+          "name": "Calendário",
+          "url": "https://cal.DOMAIN_SUFFIX",
+          "logo": "https://integration.DOMAIN_SUFFIX/logos/calendar.svg?v=1"
         }
       ]
     }