feat: add IaC layer with shared var/t1 and var/t3 data paths

Ansible provisions the k3d cluster and Flux controllers; Terraform
modules deploy the simulated fleet and ground warehouse. Compose and
k3d share var/t1 (live lake) and var/t3 (warehouse). The prototype
gains a live mode fed by the explorer read-only SQL API.

infra/gitops/ground/configmap-fleet-policy.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: ground-fleet-policy
+  namespace: ground
+  labels:
+    app.kubernetes.io/part-of: swarm-ground
+    app.kubernetes.io/managed-by: flux
+data:
+  offload_schedule: "*/2 * * * *"
+  retention_policy: "keep-all-flights"
+  explorer_mode: "read-only-sql"

infra/gitops/ground/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: ground
+resources:
+  - namespace.yaml
+  - configmap-fleet-policy.yaml

infra/gitops/ground/namespace.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: ground
+  labels:
+    app.kubernetes.io/part-of: swarm-ground