Prepare 0.1.0 for lab release: durable handlers, HTTP Compose, CI, and pulumi-tests.

- Harden DB-backed handlers and seed profiles; align client wire shapes for
  cluster resources, QEMU config, and node SSL fields
- Serve plain HTTP on Compose :8006; keep TLS optional (--profile tls) and
  terminate HTTPS at Kubernetes Ingress
- Add pulumi-tests (full contract surface majors 6–9 + BPG lifecycle) and
  make pulumi-tests
- Ship bilingual docs, CHANGELOG, SECURITY, CONTRIBUTING, and GitHub Actions
  (make ci + Compose/Helm validation)

examples/pulumi/__main__.py

@@ -15,7 +15,7 @@ import pulumi
 import requests
 
 config = pulumi.Config()
-base = config.get("base") or "http://localhost:8006/api2/json"
+base = config.get("base") or "https://localhost:8006/api2/json"
 node = config.get("node") or "pve01"
 vmid = int(config.get("vmid") or "118")
 token = config.get_secret("token") or "root@pam!automation=automation-secret"