feat(iac): scaffold orca-platform layout (M1.1)

Lands the per-VM × per-service manifest tree, per-env overlays, VM specs
for SysEleven provisioning, DNS zone placeholder, plan/apply/validate
scripts, and a Makefile.

Structure (per INFRASTRUCTURE.md §2 + IMPLEMENTATION_PLAN.md M1.1):
- manifests/{vm-edge,vm-control,vm-data,stage}/<service>.toml — 35 stubs
- overlays/{dev,stage,prod}/overlay.toml — env-selection rules
- vms/{vm-edge,vm-control,vm-data,stage}.toml — OpenStack flavor/IP/firewall
- dns/yourplatform.com.zone.template — PowerDNS zone (body lands in M0.3)
- cluster.toml.tmpl — cluster-level config rendered per env
- scripts/validate.sh — TOML parse + structural sanity
- scripts/plan.sh — merge manifests + overlay → .orca-out/<env>/
- scripts/apply.sh — push to Orca controller (no-op until M1.2)
- Makefile — validate / plan / apply / diff / clean

Each manifest header names the milestone that finalises its real values;
images today are 'placeholder' for services that need their own repo to
exist first. make validate stays green; apply gates on ORCA_API_URL.

CI workflow swapped from the broken 'orca validate' to 'make validate',
which calls a Python TOML parser plus structural checks (placement.node
matches vm dir, resources.memory present, no mis-nested keys).

Refs: M1.1

vms/README.md

@@ -0,0 +1,6 @@
+# VM specs
+
+Source of truth for the four billable VMs in `INFRASTRUCTURE.md §1`. These
+files are consumed by the M1.2 provisioning step (Terraform/OpenStack against
+SysEleven DUS2). Orca itself ignores this directory — it deals with services,
+not infrastructure.

vms/stage.toml

@@ -0,0 +1,20 @@
+# stage — single-VM stage environment. App plane only, ephemeral DBs.
+# Calls OUT to prod Keycloak + prod Stalwart per §2 isolation rules.
+
+[vm]
+name = "stage"
+env = "stage"
+flavor = "m2.small"     # 2 vCPU, 8 GB RAM
+public_ip = true         # tester access without VPN
+region = "DUS2"
+private_network = "platform-stage"
+private_ip_cidr = "10.1.1.0/24"
+
+[vm.disk]
+block_volume_gb = 50    # pg-stage + mongo-stage + qdrant-stage; reset per release
+
+[vm.firewall]
+ingress_public = [
+  { proto = "tcp", ports = [80, 443], source = "0.0.0.0/0", purpose = "stage portal" },
+]
+ingress_private = []     # stage does not accept private traffic from prod

vms/vm-control.toml

@@ -0,0 +1,20 @@
+# vm-control — Control plane (portal, tenant-registry, ERPNext, Stalwart).
+# See INFRASTRUCTURE.md §1, §2, §6.
+
+[vm]
+name = "vm-control"
+env = "prod"
+flavor = "m2.medium"    # 4 vCPU, 16 GB RAM
+public_ip = false        # only reachable via vm-edge orca-proxy
+region = "DUS2"
+private_network = "platform-prod"
+private_ip_cidr = "10.0.2.0/24"
+
+[vm.disk]
+block_volume_gb = 250   # MariaDB (ERPNext) + Stalwart mail spool, medium growth
+
+[vm.firewall]
+ingress_public = []      # no public ingress
+ingress_private = [
+  { proto = "tcp", ports = "all", source = "10.0.0.0/16", purpose = "intra-platform" },
+]

vms/vm-data.toml

@@ -0,0 +1,20 @@
+# vm-data — Data plane (CERTifAI, compliance, pg-app, MongoDB, MinIO).
+# Scale driver — bump flavor at Tier B/C per §13.
+
+[vm]
+name = "vm-data"
+env = "prod"
+flavor = "m2.medium"    # 4 vCPU, 16 GB RAM (Tier B bump: m2.large)
+public_ip = false
+region = "DUS2"
+private_network = "platform-prod"
+private_ip_cidr = "10.0.3.0/24"
+
+[vm.disk]
+block_volume_gb = 500   # MongoDB + pg-app + Qdrant + MinIO, fast growth (scales with N customers)
+
+[vm.firewall]
+ingress_public = []
+ingress_private = [
+  { proto = "tcp", ports = "all", source = "10.0.0.0/16", purpose = "intra-platform" },
+]

vms/vm-edge.toml

@@ -0,0 +1,26 @@
+# vm-edge — Identity + Infra plane, public IP, root auth dependency.
+# See INFRASTRUCTURE.md §1, §2.
+
+[vm]
+name = "vm-edge"
+env = "prod"
+flavor = "m2.small"     # 2 vCPU, 8 GB RAM
+public_ip = true
+region = "DUS2"
+private_network = "platform-prod"
+private_ip_cidr = "10.0.1.0/24"
+
+[vm.disk]
+block_volume_gb = 50    # pg-keycloak + pg-infisical + Gitea repos (slow growth)
+
+[vm.firewall]
+# vm-edge is the only host accepting public traffic. Everything else is
+# behind the private network.
+ingress_public = [
+  { proto = "tcp", ports = [80, 443], source = "0.0.0.0/0", purpose = "orca-proxy HTTP/HTTPS" },
+  { proto = "tcp", ports = [53],     source = "0.0.0.0/0", purpose = "PowerDNS (TCP)" },
+  { proto = "udp", ports = [53],     source = "0.0.0.0/0", purpose = "PowerDNS (UDP)" },
+]
+ingress_private = [
+  { proto = "tcp", ports = "all", source = "10.0.0.0/16", purpose = "intra-platform" },
+]