Add Harbor/Ceph runbooks and align single-node Ceph docs with abr deployment.

Document registry ingress split, image mirroring, loop OSD setup, and platform integration paths.

backend/helm/cloudhost-harbor/values-registry.abrban.com.yaml

@@ -0,0 +1,75 @@
+## Harbor values to REPLACE registry.abrban.com
+## Ingress controller on this cluster is Traefik (k3s).
+##
+## Install:
+##   helm upgrade --install harbor harbor/harbor -n cloudhost -f backend/helm/cloudhost-harbor/values-registry.abrban.com.yaml
+##
+externalURL: https://registry.abrban.com
+
+proxy:
+  # Values are injected by install script from `cloudhost/registry-egress-proxy`.
+  httpProxy: ""
+  httpsProxy: ""
+  noProxy: ""
+
+expose:
+  type: ingress
+  tls:
+    enabled: true
+    certSource: secret
+    secret:
+      secretName: abrban-wildcard-tls
+  ingress:
+    className: traefik
+    hosts:
+      core: registry.abrban.com
+    annotations:
+      traefik.ingress.kubernetes.io/router.entrypoints: websecure
+      # Increase timeouts for large pushes (skopeo/registry blobs)
+      traefik.ingress.kubernetes.io/router.tls: "true"
+
+# Disable components we don't need for now to reduce resources
+trivy:
+  enabled: false
+notary:
+  enabled: false
+chartmuseum:
+  enabled: false
+
+# Single-node staging: keep resource usage modest
+core:
+  replicas: 1
+jobservice:
+  replicas: 1
+registry:
+  replicas: 1
+
+persistence:
+  enabled: true
+  persistentVolumeClaim:
+    # Use existing default storage (local-path) until Ceph is ready.
+    # After Ceph, switch to rook-ceph-block for Harbor's PVCs.
+    registry:
+      storageClass: local-path
+      size: 50Gi
+    jobservice:
+      storageClass: local-path
+      size: 5Gi
+    database:
+      storageClass: local-path
+      size: 10Gi
+    redis:
+      storageClass: local-path
+      size: 5Gi
+
+database:
+  type: internal
+
+redis:
+  type: internal
+
+portal:
+  replicas: 1
+
+# We will create proxy-cache projects after install (todo: configure-proxy-cache)
+