Prepare 0.1.0 for lab release: durable handlers, HTTP Compose, CI, and pulumi-tests.

- Harden DB-backed handlers and seed profiles; align client wire shapes for
  cluster resources, QEMU config, and node SSL fields
- Serve plain HTTP on Compose :8006; keep TLS optional (--profile tls) and
  terminate HTTPS at Kubernetes Ingress
- Add pulumi-tests (full contract surface majors 6–9 + BPG lifecycle) and
  make pulumi-tests
- Ship bilingual docs, CHANGELOG, SECURITY, CONTRIBUTING, and GitHub Actions
  (make ci + Compose/Helm validation)

docs/domains/README.md

@@ -1,3 +1,5 @@
+**Language / Язык:** [English](README.md) | [Русский](../ru/domains/README.md)
+
 # Domain guides
 
 These pages summarize durable semantics by area. For exhaustive method lists,

docs/domains/access.md

@@ -1,3 +1,5 @@
+**Language / Язык:** [English](access.md) | [Русский](../ru/domains/access.md)
+
 # Access
 
 Durable identity and authorization: users, groups, roles, ACL entries, realms,

docs/domains/ceph.md

@@ -1,3 +1,5 @@
+**Language / Язык:** [English](ceph.md) | [Русский](../ru/domains/ceph.md)
+
 # Ceph
 
 Ceph-related API paths persist simulated cluster, pool, OSD, and monitor state.

docs/domains/cluster-extras.md

@@ -1,3 +1,5 @@
+**Language / Язык:** [English](cluster-extras.md) | [Русский](../ru/domains/cluster-extras.md)
+
 # Cluster extras
 
 Additional cluster-scoped domains with durable handlers:

docs/domains/core-cluster.md

@@ -1,3 +1,5 @@
+**Language / Язык:** [English](core-cluster.md) | [Русский](../ru/domains/core-cluster.md)
+
 # Core & cluster
 
 ## Version

docs/domains/firewall.md

@@ -1,3 +1,5 @@
+**Language / Язык:** [English](firewall.md) | [Русский](../ru/domains/firewall.md)
+
 # Firewall
 
 Cluster, node, and guest firewall configuration — rules, aliases, IP sets,

docs/domains/ha.md

@@ -1,3 +1,5 @@
+**Language / Язык:** [English](ha.md) | [Русский](../ru/domains/ha.md)
+
 # HA
 
 High-availability groups, resources, status, and rules persist in cluster

docs/domains/lxc.md

@@ -1,3 +1,5 @@
+**Language / Язык:** [English](lxc.md) | [Русский](../ru/domains/lxc.md)
+
 # LXC
 
 Container APIs mirror the QEMU lifecycle patterns where the contract declares

docs/domains/pools.md

@@ -1,3 +1,5 @@
+**Language / Язык:** [English](pools.md) | [Русский](../ru/domains/pools.md)
+
 # Pools
 
 Pool CRUD and resource membership are fully covered and durable. The `medium`

docs/domains/qemu.md

@@ -1,3 +1,5 @@
+**Language / Язык:** [English](qemu.md) | [Русский](../ru/domains/qemu.md)
+
 # QEMU
 
 Full contract surface for QEMU guests on the active major, including:

docs/domains/sdn.md

@@ -1,3 +1,5 @@
+**Language / Язык:** [English](sdn.md) | [Русский](../ru/domains/sdn.md)
+
 # SDN
 
 Software-defined networking handlers cover declared zones, VNets, subnets,

docs/domains/storage-backup.md

@@ -1,3 +1,5 @@
+**Language / Язык:** [English](storage-backup.md) | [Русский](../ru/domains/storage-backup.md)
+
 # Storage & backup
 
 ## Storage

docs/domains/tasks.md

@@ -1,3 +1,5 @@
+**Language / Язык:** [English](tasks.md) | [Русский](../ru/domains/tasks.md)
+
 # Tasks
 
 Long-running operations return a Proxmox-style **UPID**. Task rows, events,