feat: OCI deployment — Terraform VM + OKE stacks, OCIR, K8s manifests

- terraform-vm/: ARM VM (A1.Flex Free Tier), Docker Compose, Block Volume, LB+WAF+SSL
- terraform-oke/: OKE cluster (3 nodes Intel), NodePort, LB+WAF+SSL
- k8s/: namespace, deployments, services, PVC, secrets, configmap
- Dockerfile.frontend: self-contained nginx+dist image
- push-images.sh: multi-arch build (amd64+arm64) + push to OCIR
- dns.tf: conditional OCI DNS Zone + A record (when domain available)
- Both stacks 100% independent, no shared modules
- .gitignore: terraform state, .terraform/, *.tfvars

deploy/terraform-oke/terraform.tfvars.example

@@ -0,0 +1,58 @@
+# =============================================================================
+# OCI CIS Agent — OKE Deployment Stack
+# Copy this file to terraform.tfvars and fill in your values.
+# =============================================================================
+
+# --- OCI Authentication ---
+tenancy_ocid     = "ocid1.tenancy.oc1..aaaaaaaaXXXXXXXX"
+user_ocid        = "ocid1.user.oc1..aaaaaaaaXXXXXXXX"
+fingerprint      = "aa:bb:cc:dd:ee:ff:00:11:22:33:44:55:66:77:88:99"
+private_key_path = "~/.oci/oci_api_key.pem"
+region           = "us-ashburn-1"
+
+# --- Compartment ---
+compartment_ocid = "ocid1.compartment.oc1..aaaaaaaaXXXXXXXX"
+
+# --- Networking (defaults are fine for most deployments) ---
+# vcn_cidr           = "10.0.0.0/16"
+# public_subnet_cidr = "10.0.1.0/24"
+# nodes_subnet_cidr  = "10.0.2.0/24"
+# api_subnet_cidr    = "10.0.3.0/24"
+
+# --- OKE Cluster ---
+# kubernetes_version = "v1.30.1"
+# cluster_name       = "oci-cis-agent-oke"
+
+# --- Node Pool ---
+# node_shape          = "VM.Standard3.Flex"
+# node_ocpus          = 2
+# node_memory_gb      = 16
+# node_count          = 3
+# node_boot_volume_gb = 50
+
+# --- SSH Key ---
+ssh_public_key = "ssh-rsa AAAAB3NzaC1yc2EAAAA... your-key-here"
+
+# --- Application ---
+# Generate with: python3 -c "import secrets; print(secrets.token_hex(64))"
+app_secret       = "YOUR_128_CHAR_HEX_SECRET_HERE"
+# jwt_expiry_hours = 12
+# app_timezone     = "UTC"
+
+# --- OCIR ---
+ocir_namespace  = "your-tenancy-namespace"
+# ocir_repo_prefix = "oci-cis-agent"
+
+# --- Load Balancer ---
+# lb_min_bandwidth_mbps = 10
+# lb_max_bandwidth_mbps = 100
+# node_port             = 30080
+
+# --- DNS (optional: leave empty to skip) ---
+# domain_name = "cisagent.example.com"
+
+# --- Tags ---
+# freeform_tags = {
+#   "Project"   = "oci-cis-agent"
+#   "ManagedBy" = "terraform"
+# }