feat(lasuite): add calendars service deployment manifests

Add K8s manifests for calendars backend, frontend (Caddy), CalDAV
server, and Celery worker. Wire Pingora routing for cal.sunbeam.pt
with path-based backend/caldav/static splits. Add OAuth2Client for
OIDC, VaultDynamicSecret for DB credentials, VaultStaticSecret for
Django/CalDAV keys, and TLS cert coverage for the cal subdomain.
Register calendars in the integration service gaufre widget.

base/lasuite/kustomization.yaml

@@ -41,6 +41,16 @@ resources:
   - messages-mpa-service.yaml
   - messages-socks-proxy-deployment.yaml
   - messages-socks-proxy-service.yaml
+  - calendars-config.yaml
+  - calendars-theme-configmap.yaml
+  - calendars-backend-deployment.yaml
+  - calendars-backend-service.yaml
+  - calendars-caldav-deployment.yaml
+  - calendars-caldav-service.yaml
+  - calendars-worker-deployment.yaml
+  - calendars-frontend-caddyfile.yaml
+  - calendars-frontend-deployment.yaml
+  - calendars-frontend-service.yaml
 
 patches:
   # Rewrite hardcoded production integration URL + inject theme CSS in people-frontend