T-0.1 Flux GitOps layout + dev/prod overlays + platform component skeletons (R-GITOPS-01/03, R-ENV-02, R-PLAT-01)

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

platform/cert-manager/values.yaml

@@ -0,0 +1,6 @@
+# cert-manager Helm values — PLACEHOLDER (Phase 0). Authoritative values inline in helmrelease.yaml.
+#
+# crds.enabled: true                          # install CRDs with the chart
+# dns01RecursiveNameservers / -Only           # TODO(WS-SEC): may be needed with split-horizon DNS
+# ClusterIssuers (letsencrypt-staging/-prod) live in clusterissuers.yaml, not here.
+# Cloudflare API token: SOPS-encrypted secret `cloudflare-api-token` (WS-SEC, OQ-4) — name only.