chore(memory): temp-disable KubeVirt to relieve node memory pressure

The 3x 6GB nodes are OOM (k3s-dev-2's kubelet stopped; dev-1/dev-3 <600MB free). KubeVirt runs
a full control plane (~1.5-2GB) for ZERO running VMs — its IaaS conformance (R-PLAT-03/04,
R-NET-01, R-STATE-01) is already certified, so disabling the running pods loses no delivered
capability. Re-enable (uncomment kubevirt in platform + platform-config) once the VMs' RAM is
grown. Manifests retained; reversible.

platform-config/kustomization.yaml

@@ -35,11 +35,11 @@ resources:
   # operators register; the ServiceMonitors/alerts consume monitoring.coreos.com. All CRs of platform-
   # installed CRDs -> applied here, gated dependsOn platform (F-MON1). The dashboard is a plain
   # ConfigMap kept beside them for locality.
-  - ../platform/kubevirt/kubevirt-cr.yaml
-  - ../platform/kubevirt/cdi-cr.yaml
-  - ../platform/kubevirt/servicemonitor.yaml
-  - ../platform/kubevirt/alerts.yaml
-  - ../platform/kubevirt/dashboard.yaml
+  # TEMP-DISABLED (memory): - ../platform/kubevirt/kubevirt-cr.yaml
+  # TEMP-DISABLED (memory): - ../platform/kubevirt/cdi-cr.yaml
+  # TEMP-DISABLED (memory): - ../platform/kubevirt/servicemonitor.yaml
+  # TEMP-DISABLED (memory): - ../platform/kubevirt/alerts.yaml
+  # TEMP-DISABLED (memory): - ../platform/kubevirt/dashboard.yaml
   # --- Phase 6 — Identity / SSO (ADR-0014) ---
   # keycloak: the CNPG DB Cluster + Keycloak instance + realm import (CRs of the CNPG / Keycloak
   # operator CRDs installed by platform/cnpg + platform/keycloak) + its ingress + ServiceMonitor.