feat: OCI deployment — Terraform VM + OKE stacks, OCIR, K8s manifests

- terraform-vm/: ARM VM (A1.Flex Free Tier), Docker Compose, Block Volume, LB+WAF+SSL
- terraform-oke/: OKE cluster (3 nodes Intel), NodePort, LB+WAF+SSL
- k8s/: namespace, deployments, services, PVC, secrets, configmap
- Dockerfile.frontend: self-contained nginx+dist image
- push-images.sh: multi-arch build (amd64+arm64) + push to OCIR
- dns.tf: conditional OCI DNS Zone + A record (when domain available)
- Both stacks 100% independent, no shared modules
- .gitignore: terraform state, .terraform/, *.tfvars

deploy/terraform-vm/registry.tf

@@ -0,0 +1,14 @@
+# -----------------------------------------------------------------------------
+# OCIR Repositories
+# -----------------------------------------------------------------------------
+resource "oci_artifacts_container_repository" "backend" {
+  compartment_id = var.compartment_ocid
+  display_name   = "${var.ocir_repo_prefix}/backend"
+  is_public      = false
+}
+
+resource "oci_artifacts_container_repository" "frontend" {
+  compartment_id = var.compartment_ocid
+  display_name   = "${var.ocir_repo_prefix}/frontend"
+  is_public      = false
+}