Initial commit: breakpilot-core - Shared Infrastructure

Docker Compose with 24+ services:
- PostgreSQL (PostGIS), Valkey, MinIO, Qdrant
- Vault (PKI/TLS), Nginx (Reverse Proxy)
- Backend Core API, Consent Service, Billing Service
- RAG Service, Embedding Service
- Gitea, Woodpecker CI/CD
- Night Scheduler, Health Aggregator
- Jitsi (Web/XMPP/JVB/Jicofo), Mailpit

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

vault/agent/templates/all.tpl

@@ -0,0 +1,9 @@
+{{- /* Combined Certificate Template - generates all certificate components from a single PKI call */ -}}
+{{- with pkiCert "pki_int/issue/breakpilot-internal" "common_name=macmini" "alt_names=localhost,macmini.local" "ip_sans=127.0.0.1,192.168.178.163" "ttl=168h" -}}
+===CERT===
+{{ .Cert }}
+===CA===
+{{ .CA }}
+===KEY===
+{{ .Key }}
+{{- end -}}

vault/agent/templates/ca-chain.tpl

@@ -0,0 +1,4 @@
+{{- /* CA Chain Template */ -}}
+{{- with pkiCert "pki_int/issue/breakpilot-internal" "common_name=macmini" "alt_names=localhost,macmini.local" "ip_sans=127.0.0.1,192.168.178.163" "ttl=168h" -}}
+{{ .CA }}
+{{- end -}}

vault/agent/templates/cert.tpl

@@ -0,0 +1,5 @@
+{{- /* Certificate Template for macmini */ -}}
+{{- with pkiCert "pki_int/issue/breakpilot-internal" "common_name=macmini" "alt_names=localhost,macmini.local" "ip_sans=127.0.0.1,192.168.178.163" "ttl=168h" -}}
+{{ .Cert }}
+{{ .CA }}
+{{- end -}}

vault/agent/templates/key.tpl

@@ -0,0 +1,4 @@
+{{- /* Private Key Template for macmini */ -}}
+{{- with pkiCert "pki_int/issue/breakpilot-internal" "common_name=macmini" "alt_names=localhost,macmini.local" "ip_sans=127.0.0.1,192.168.178.163" "ttl=168h" -}}
+{{ .Key }}
+{{- end -}}