T-0.1 Flux GitOps layout + dev/prod overlays + platform component skeletons (R-GITOPS-01/03, R-ENV-02, R-PLAT-01)

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

clusters/base/flux-system.yaml

@@ -0,0 +1,25 @@
+---
+# GitRepository — the single source of truth Flux reconciles from (R-GITOPS-01).
+# Phase 0 STUB: not applied until Flux is bootstrapped in Phase 1 (WS-INFRA).
+#
+# Bootstrapping sequence (spec docs/05 "Source-of-truth", CONTRIBUTING.md):
+#   1. Initially points at the BOOTSTRAP SOURCE (this local repo / out-of-band).
+#   2. Gitea is onboarded early (roadmap Phase 6).
+#   3. TODO(WS-GITOPS, Phase 6): repoint spec.url -> https://gitea.home.keithjackson.dev/<org>/home-network-k3s-impl
+#      and keep an off-cluster mirror so a source-of-truth outlives the cluster.
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: GitRepository
+metadata:
+  name: flux-system
+  namespace: flux-system
+spec:
+  interval: 1m
+  # TODO(WS-INFRA/WS-GITOPS): set to the bootstrap source URL at Phase-1 bootstrap.
+  url: https://REPLACE-ME.invalid/home-network-k3s-impl.git
+  ref:
+    # Reconcile the tracked branch. Overlay may patch this if dev/prod track different branches;
+    # the default model tracks a single branch and differentiates by clusters/<env> path.
+    branch: main
+  # TODO(WS-SEC, Phase 1): reference the SOPS/age or deploy-key secret BY NAME only (no plaintext).
+  # secretRef:
+  #   name: flux-system   # created by `flux bootstrap`