T-0.1 Flux GitOps layout + dev/prod overlays + platform component skeletons (R-GITOPS-01/03, R-ENV-02, R-PLAT-01)

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

platform/externaldns/values.yaml

@@ -0,0 +1,8 @@
+# ExternalDNS Helm values — PLACEHOLDER (Phase 0). Authoritative values inline in helmrelease.yaml.
+#
+# provider.name: cloudflare
+# sources: [gateway-httproute, service]        # Cilium Gateway API + Services (docs/09)
+# domainFilters: [home.keithjackson.dev]        # only the platform zone
+# policy: sync                                  # create/update/delete records with services
+# Cloudflare token: SOPS-encrypted `cloudflare-api-token` (WS-SEC, OQ-4) — name only.
+# NOTE: `internal` services need NO public record (PiHole split-horizon, docs/09).