Deploy to production: GitHub Actions + ghcr.io + Kubernetes

- Switch from Gitea to GitHub Container Registry (ghcr.io)
- Add GitHub Actions workflow with Tailscale connectivity
- Update k8s manifests for cloud nodes and Traefik ingress
- Configure for turbo.kazcloud.dev domain
- Test deployment with home page text change

k8s/ingress.yaml

@@ -4,13 +4,13 @@ metadata:
   name: turbovault-ingress
   namespace: turbovault
   annotations:
-    # Update these based on your ingress controller
-    # nginx.ingress.kubernetes.io/ssl-redirect: "true"
-    # cert-manager.io/cluster-issuer: "letsencrypt-prod"
+    # Use Traefik with Let's Encrypt (same as Gitea)
+    traefik.ingress.kubernetes.io/router.tls: "true"
+    traefik.ingress.kubernetes.io/router.tls.certresolver: letsencrypt
 spec:
-  ingressClassName: nginx  # Or traefik, depending on your setup
+  ingressClassName: traefik
   rules:
-  - host: turbovault.example.com  # Update with your domain
+  - host: turbo.kazcloud.dev
     http:
       paths:
       - path: /
@@ -20,8 +20,3 @@ spec:
             name: turbovault-service
             port:
               number: 80
-  # Uncomment for TLS/HTTPS
-  # tls:
-  # - hosts:
-  #   - turbovault.example.com
-  #   secretName: turbovault-tls