Prepare 0.1.0 for lab release: durable handlers, HTTP Compose, CI, and pulumi-tests.

- Harden DB-backed handlers and seed profiles; align client wire shapes for
  cluster resources, QEMU config, and node SSL fields
- Serve plain HTTP on Compose :8006; keep TLS optional (--profile tls) and
  terminate HTTPS at Kubernetes Ingress
- Add pulumi-tests (full contract surface majors 6–9 + BPG lifecycle) and
  make pulumi-tests
- Ship bilingual docs, CHANGELOG, SECURITY, CONTRIBUTING, and GitHub Actions
  (make ci + Compose/Helm validation)

examples/terraform/main.tf

@@ -16,8 +16,8 @@ provider "proxmox" {
 
 variable "endpoint" {
   type        = string
-  description = "Simulator HTTPS gateway, e.g. https://localhost:8007"
-  default     = "https://localhost:8007"
+  description = "Simulator HTTPS gateway, e.g. https://localhost:8006"
+  default     = "https://localhost:8006"
 }
 
 variable "api_token" {

examples/terraform/terraform.tfvars.example

@@ -1,5 +1,5 @@
 # Optional overrides — copy to terraform.tfvars if needed.
-# endpoint  = "https://localhost:8007"
+# endpoint  = "http://localhost:8006"
 # api_token = "root@pam!automation=automation-secret"
 # node_name = "pve01"
 # vmid      = 117