Deploy eve-skill-farm to the lab cluster

The Foundation program's exit proof: eve-skill-farm running in the lab Talos cluster.

Depends on the Phase 5 platform services: lab#5 (ingress), lab#6 (storage), lab#9 (secrets), lab#13 (DNS).

Scope: container packaging (Dockerfile + CI image publish), GitOps app definition and manifests, a migration job, event-store persistence on the storage provisioner, ingress for the web shell. TLS and auth wiring wait for M6 and cert-manager (lab#7).

No app feature work is required. The current cmd/server (stub auth, minimal UI) already exercises ingress, storage, secrets, and DNS, which is what the exit proof verifies. Config already reads k8s-style file-mounted secrets (DATABASE_URL_FILE, NATS_FILE) and exposes /healthz and /readyz probes.

Generated with Claude Code