Add GitOps stack for abrban.com with Gitea Actions CI/CD.

Harbor in-cluster builds via Kaniko, ArgoCD auto-sync, and production Helm values for abrban.com domains.

Co-authored-by: Cursor <cursoragent@cursor.com>

gitops/jobs/seed-ci-images.yaml

@@ -0,0 +1,33 @@
+# Bootstrap: copy act_runner + kaniko into abrban/ (kubelet cannot use proxy-cache reliably)
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: seed-ci-images
+  namespace: cloudhost
+spec:
+  ttlSecondsAfterFinished: 3600
+  backoffLimit: 2
+  template:
+    spec:
+      restartPolicy: Never
+      imagePullSecrets:
+        - name: registry-pull-secret
+      containers:
+        - name: skopeo
+          image: registry.abrban.com/proxy-quay/skopeo/stable:latest
+          envFrom:
+            - secretRef:
+                name: registry-egress-proxy
+          command:
+            - sh
+            - -ec
+            - |
+              set -eux
+              DEST="docker://harbor-registry.cloudhost.svc.cluster.local:5000/abrban"
+              skopeo copy --dest-tls-verify=false \
+                docker://docker.gitea.com/gitea/act_runner:0.2.11 \
+                "${DEST}/act-runner:0.2.11"
+              skopeo copy --dest-tls-verify=false \
+                docker://gcr.io/kaniko-project/executor:v1.23.2 \
+                "${DEST}/kaniko-executor:v1.23.2"
+              echo SEED_OK