Prepare 0.1.0 for lab release: durable handlers, HTTP Compose, CI, and pulumi-tests.

- Harden DB-backed handlers and seed profiles; align client wire shapes for
  cluster resources, QEMU config, and node SSL fields
- Serve plain HTTP on Compose :8006; keep TLS optional (--profile tls) and
  terminate HTTPS at Kubernetes Ingress
- Add pulumi-tests (full contract surface majors 6–9 + BPG lifecycle) and
  make pulumi-tests
- Ship bilingual docs, CHANGELOG, SECURITY, CONTRIBUTING, and GitHub Actions
  (make ci + Compose/Helm validation)

examples/java/Cookbook.java

@@ -18,7 +18,7 @@ public final class Cookbook {
   private static final HttpClient CLIENT = HttpClient.newHttpClient();
 
   public static void main(String[] args) throws Exception {
-    String base = env("PVE_BASE", "http://localhost:8006/api2/json");
+    String base = env("PVE_BASE", "https://localhost:8006/api2/json");
     String node = env("PVE_NODE", "pve01");
     String vmid = env("PVE_VMID", "114");
     String token = env("PVE_API_TOKEN", "root@pam!automation=automation-secret");