Prepare 0.1.0 for lab release: durable handlers, HTTP Compose, CI, and pulumi-tests.

- Harden DB-backed handlers and seed profiles; align client wire shapes for
  cluster resources, QEMU config, and node SSL fields
- Serve plain HTTP on Compose :8006; keep TLS optional (--profile tls) and
  terminate HTTPS at Kubernetes Ingress
- Add pulumi-tests (full contract surface majors 6–9 + BPG lifecycle) and
  make pulumi-tests
- Ship bilingual docs, CHANGELOG, SECURITY, CONTRIBUTING, and GitHub Actions
  (make ci + Compose/Helm validation)

docs/examples/overview.md

@@ -1,3 +1,5 @@
+**Language / Язык:** [English](overview.md) | [Русский](../ru/examples/overview.md)
+
 # Client examples overview
 
 ## Bring-up checklist
@@ -20,7 +22,7 @@ curl -s -X POST 'http://localhost:8006/ui/api/contract/apply?major=8'
 | URL | When |
 |---|---|
 | `http://localhost:8006` | curl, Go, Java, Perl, Ansible, requests |
-| `https://localhost:8007` | proxmoxer, many Terraform/Pulumi TLS clients |
+| `http://localhost:8006` | proxmoxer, many Terraform/Pulumi TLS clients |
 
 ## Auth quick reference