T-0.1 Flux GitOps layout + dev/prod overlays + platform component skeletons (R-GITOPS-01/03, R-ENV-02, R-PLAT-01)

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

platform/kustomization.yaml

@@ -0,0 +1,25 @@
+---
+# Top-level platform kustomization — the entrypoint the Flux `platform` Kustomization renders
+# (clusters/base/platform.yaml, path: ./platform).
+#
+# Phase 0 scaffolding: lists every platform component EXCEPT kyverno (owned by the policy engineer,
+# WS-TEST — see platform/README.md).
+#
+# ⚠️ INTEGRATION TODO(PM): once platform/kyverno/ is authored by the policy engineer, uncomment the
+# `- kyverno` line below. Keep it FIRST so admission policies are present before other components
+# reconcile. This workstream must NOT create files under platform/kyverno/.
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  # - kyverno            # TODO(PM): enable when the policy engineer's kyverno stub lands (WS-TEST)
+  - cilium
+  - longhorn
+  - cert-manager
+  - externaldns
+  - gateway
+  - monitoring
+  - velero
+  - kubevirt
+  - image-automation
+  - keycloak
+  - oauth2-proxy