feat(lasuite): add Projects (Planka Kanban) service

Deploy Planka-based project management at projects.DOMAIN_SUFFIX:
- ConfigMap with OIDC, S3, SMTP, La Gaufre widget config
- Deployment + Service (init container for DB migrations, Sails on 1337)
- OAuth2Client (client_secret_basic, redirect to /oidc-callback)
- VaultDynamicSecret for DATABASE_URL, VaultStaticSecret for SECRET_KEY
- Pingora route with websocket support (Socket.io)
- Image overrides in both local and production overlays
- TLS cert dnsNames updated for projects subdomain
- Integration service.json updated with Projects entry
- seaweedfs-s3-credentials rolloutRestartTargets includes projects

overlays/local/kustomization.yaml

@@ -53,6 +53,11 @@ images:
     newName: src.DOMAIN_SUFFIX/studio/meet-frontend
     newTag: latest
 
+  # Projects (Kanban) — built and pushed by `sunbeam build projects`
+  - name: projects
+    newName: src.DOMAIN_SUFFIX/studio/projects
+    newTag: latest
+
   # Calendars — built from source and pushed to Gitea registry.
   - name: calendars-backend
     newName: src.DOMAIN_SUFFIX/studio/calendars-backend

overlays/production/cert-manager.yaml

@@ -71,3 +71,4 @@ spec:
     - integration.DOMAIN_SUFFIX
     - livekit.DOMAIN_SUFFIX
     - cal.DOMAIN_SUFFIX
+    - projects.DOMAIN_SUFFIX

overlays/production/kustomization.yaml

@@ -75,6 +75,11 @@ images:
     newName: src.DOMAIN_SUFFIX/studio/calendars-frontend
     newTag: latest
 
+  # Projects (Kanban) — built and pushed by `sunbeam build projects`
+  - name: projects
+    newName: src.DOMAIN_SUFFIX/studio/projects
+    newTag: latest
+
   # Tuwunel Matrix homeserver — built and pushed by `sunbeam build tuwunel`
   - name: tuwunel
     newName: src.DOMAIN_SUFFIX/studio/tuwunel