Prepare 0.1.0 for lab release: durable handlers, HTTP Compose, CI, and pulumi-tests.

- Harden DB-backed handlers and seed profiles; align client wire shapes for
  cluster resources, QEMU config, and node SSL fields
- Serve plain HTTP on Compose :8006; keep TLS optional (--profile tls) and
  terminate HTTPS at Kubernetes Ingress
- Add pulumi-tests (full contract surface majors 6–9 + BPG lifecycle) and
  make pulumi-tests
- Ship bilingual docs, CHANGELOG, SECURITY, CONTRIBUTING, and GitHub Actions
  (make ci + Compose/Helm validation)

docs/web-ui.md

@@ -1,3 +1,5 @@
+**Language / Язык:** [English](web-ui.md) | [Русский](ru/web-ui.md)
+
 # Web UI
 
 Open [http://localhost:8006/](http://localhost:8006/) after `make up`.
@@ -28,6 +30,8 @@ Dark theme — same console with theme toggle:
 - **Apply as runtime** hot-swap for the active contract
 - Compatibility and readiness views
 - Demo-cluster load / unload / refresh
+- UPID task monitor (header control → status / log / “From last response”;
+  requires login for authenticated task polls)
 - Link to OpenAPI at `/docs`
 
 ## Backend helpers