Prepare 0.1.0 for lab release: durable handlers, HTTP Compose, CI, and pulumi-tests.

- Harden DB-backed handlers and seed profiles; align client wire shapes for
  cluster resources, QEMU config, and node SSL fields
- Serve plain HTTP on Compose :8006; keep TLS optional (--profile tls) and
  terminate HTTPS at Kubernetes Ingress
- Add pulumi-tests (full contract surface majors 6–9 + BPG lifecycle) and
  make pulumi-tests
- Ship bilingual docs, CHANGELOG, SECURITY, CONTRIBUTING, and GitHub Actions
  (make ci + Compose/Helm validation)

tests/unit/test_extended_handlers.py

@@ -66,7 +66,11 @@ class HandlerPool:
     async def fetchrow(self, sql: str, *args: object) -> dict[str, object] | None:
         del args
         if "FROM nodes WHERE name" in sql:
-            return {"name": "pve01", "status": "online"} if self.node_exists else None
+            if not self.node_exists:
+                return None
+            if "metadata" in sql:
+                return {"metadata": "{}"}
+            return {"name": "pve01", "status": "online"}
         if "FROM clusters" in sql:
             return {"metadata": '{"options":{"keyboard":"de-ch"}}'}
         if "FROM storages" in sql:
@@ -156,7 +160,7 @@ async def test_storage_and_ceph_handlers() -> None:
     )
     assert osds[0]["status"] == "up"
     ceph_status = await _call(registry.get("/cluster/ceph/status", "GET"), {})
-    assert ceph_status["osdmap"]["num_osds"] == 300
+    assert ceph_status["osdmap"]["num_osds"] == 1
 
 
 @pytest.mark.asyncio