Add K3s dev deployment setup for single-node VPS

Mirrors the prod deploy-k3s/ setup but runs all services in-cluster
on a single node: PostgreSQL (replaces Neon), MinIO S3-compatible
storage (replaces B2), Redis, API, worker, and admin.

Includes fully automated setup scripts (00-init through 04-verify),
server hardening (SSH, fail2ban, ufw), Let's Encrypt TLS via Traefik,
network policies, RBAC, and security contexts matching prod.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

deploy-k3s/.gitignore

@@ -0,0 +1,20 @@
+# Single config file (contains tokens and credentials)
+config.yaml
+
+# Generated files
+kubeconfig
+cluster-config.yaml
+prod.env
+
+# Secret files
+secrets/*.txt
+secrets/*.p8
+secrets/*.pem
+secrets/*.key
+secrets/*.crt
+!secrets/README.md
+
+# Terraform / Hetzner state
+*.tfstate
+*.tfstate.backup
+.terraform/