T-0.1 Flux GitOps layout + dev/prod overlays + platform component skeletons (R-GITOPS-01/03, R-ENV-02, R-PLAT-01)

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

platform/velero/README.md

@@ -0,0 +1,22 @@
+# platform/velero
+
+**Velero** — off-cluster backup and DR of volumes + Kubernetes resource state.
+
+- **Governing ADR:** [ADR-0003 — Longhorn (+ bulk tier + Velero)](../../../home-network-k3s/decisions/adr-0003-storage-longhorn.md)
+- **Spec:** [docs/04 — Storage & State](../../../home-network-k3s/docs/04-storage-and-state.md)
+- **Serves:** R-STATE-03
+- **Owner:** WS-STORAGE
+
+## What this stub is
+
+Flux `HelmRelease` with a placeholder off-cluster backup target (S3-compatible/NFS) and scheduled
+backups whose cadence/retention are overlay knobs (`${VELERO_*}`, R-ENV-02). Backup credentials are
+referenced **by name** (`velero-backup-credentials`), **SOPS-encrypted** (WS-SEC). Works with Longhorn
+volume backups.
+
+## TODO (later phases)
+
+- **OQ-2 (human):** concrete off-cluster target (endpoint, bucket, resilience) is a prerequisite.
+- **Phase 4 (WS-STORAGE):** wire the target + Longhorn backups; prove a **DR drill** — restore a
+  namespace + volumes from off-cluster backup (R-STATE-03, Phase-4 exit gate).
+- **DR-critical services** (Gitea, Keycloak, Nextcloud) get off-cluster backup + mirror per docs/05.