feat(lasuite): add Projects (Planka Kanban) service

Deploy Planka-based project management at projects.DOMAIN_SUFFIX:
- ConfigMap with OIDC, S3, SMTP, La Gaufre widget config
- Deployment + Service (init container for DB migrations, Sails on 1337)
- OAuth2Client (client_secret_basic, redirect to /oidc-callback)
- VaultDynamicSecret for DATABASE_URL, VaultStaticSecret for SECRET_KEY
- Pingora route with websocket support (Socket.io)
- Image overrides in both local and production overlays
- TLS cert dnsNames updated for projects subdomain
- Integration service.json updated with Projects entry
- seaweedfs-s3-credentials rolloutRestartTargets includes projects

base/lasuite/kustomization.yaml

@@ -51,6 +51,8 @@ resources:
   - calendars-frontend-caddyfile.yaml
   - calendars-frontend-deployment.yaml
   - calendars-frontend-service.yaml
+  - projects-config.yaml
+  - projects-deployment.yaml
 
 patches:
   # Rewrite hardcoded production integration URL + inject theme CSS in people-frontend