feat(lasuite): add Projects (Planka Kanban) service

Deploy Planka-based project management at projects.DOMAIN_SUFFIX:
- ConfigMap with OIDC, S3, SMTP, La Gaufre widget config
- Deployment + Service (init container for DB migrations, Sails on 1337)
- OAuth2Client (client_secret_basic, redirect to /oidc-callback)
- VaultDynamicSecret for DATABASE_URL, VaultStaticSecret for SECRET_KEY
- Pingora route with websocket support (Socket.io)
- Image overrides in both local and production overlays
- TLS cert dnsNames updated for projects subdomain
- Integration service.json updated with Projects entry
- seaweedfs-s3-credentials rolloutRestartTargets includes projects

base/lasuite/oidc-clients.yaml

@@ -200,3 +200,23 @@ spec:
   tokenEndpointAuthMethod: client_secret_post
   secretName: oidc-calendars
   skipConsent: true
+---
+# ── Projects (Kanban) ──────────────────────────────────────────────────────
+apiVersion: hydra.ory.sh/v1alpha1
+kind: OAuth2Client
+metadata:
+  name: projects
+  namespace: lasuite
+spec:
+  clientName: Projects
+  grantTypes:
+    - authorization_code
+    - refresh_token
+  responseTypes:
+    - code
+  scope: openid email profile
+  redirectUris:
+    - https://projects.DOMAIN_SUFFIX/oidc-callback
+  tokenEndpointAuthMethod: client_secret_basic
+  secretName: oidc-projects
+  skipConsent: true