Prepare 0.1.0 for lab release: durable handlers, HTTP Compose, CI, and pulumi-tests.

- Harden DB-backed handlers and seed profiles; align client wire shapes for
  cluster resources, QEMU config, and node SSL fields
- Serve plain HTTP on Compose :8006; keep TLS optional (--profile tls) and
  terminate HTTPS at Kubernetes Ingress
- Add pulumi-tests (full contract surface majors 6–9 + BPG lifecycle) and
  make pulumi-tests
- Ship bilingual docs, CHANGELOG, SECURITY, CONTRIBUTING, and GitHub Actions
  (make ci + Compose/Helm validation)

app/tasks/qemu.py

@@ -62,10 +62,12 @@ def qemu_handler(repository: TaskRepository, clock: Clock) -> TaskHandler:
 
 
 async def _create(repository: TaskRepository, task: Task) -> dict[str, Any]:
+    from app.simulation.seed import enrich_guest_state
+
     node, vmid = str(task.payload["node"]), int(task.payload["vmid"])
     config = dict(task.payload.get("config", {}))
     resource_id = uuid.uuid4()
-    state = {"status": "stopped", **config}
+    state = enrich_guest_state({"status": "stopped", **config}, kind="qemu", vmid=str(vmid))
     async with repository.pool.acquire() as connection:
         async with connection.transaction():
             node_row = await connection.fetchrow(