k.rennerandClaude Opus 4.7
e9268ad9e2
New apps/shelly-manager Deployment + LAN-only Ingress under `shelly-manager.k.renner.uno`, pulling from the in-house gitea registry. Adds a second broker user `shellies` scoped to `shellies/#` + `homeassistant/#` so devices can be provisioned without sharing the HA credential, and a third `admin` user for workstation debugging — each on its own bootstrap Job + Secret so passwords rotate independently. Image automation tracks `build.<unix-ts>` tags published by the shelly-manager CI; gitea registry creds live in both `apps` and `flux-system` namespaces (SOPS placeholders pending tokens). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>