v1.1.0-eb881ac-202604020539

merge upstream: resolve test-k8s-deploy.yml conflict, add workflow_call

Keep upstream's schedule/path triggers and install scripts, add
workflow_dispatch and workflow_call so publish.yml can gate on it.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

v1.1.0-7f11766-202604020528

Migrate canonical source from Gitea to GitHub (#738)

- Update all self-references from `git.vdb.to/cerc-io/stack-orchestrator` to
  `github.com/cerc-io/stack-orchestrator` (setup.py, pyproject.toml, README,
  docs, install scripts, cloud-init scripts, stack READMEs)
- Fix release download URL pattern (`releases/download/latest` -> `releases/latest/download`)
- Port 5 Gitea-only CI workflows to GitHub Actions (k8s-deploy, k8s-deployment-control, container-registry, database, external-stack)
- Pin `shiv==1.0.8` in all workflows for reproducible builds
- Restrict smoke/deploy/webapp test push triggers to `main` only
- Remove `.gitea/` directory - Gitea repo to be archived

v1.1.0-2afc7ad-202604020404

Update refs in root readme; test publish workflow

v1.1.0-185ebf1-202604020934

Fix failing k8s and external-stack CI test scripts (#739)

- Add `--perform-cluster-management` to container-registry, k8s-deployment-control, and database test scripts (`--skip-cluster-management` is now the default)
- Fix `wait_for_log_output()` in all k8s tests - "No logs available" is non-empty, so the check was passing prematurely
- Use HTTPS for container-registry catalog check (Caddy redirects HTTP->HTTPS)
- Fix external-stack sync test: sed pattern used `=` but spec is YAML (`: `), so the substitution never matched
- Workaround hyphenated env var name (`test-variable-1`) from upstream test-external-stack repo - docker compose v2 rejects hyphens
- Quote `echo $log_output` vars to prevent glob expansion in error output
- Use stack name (instead of cluster-id) derived namespace in k8s-deployment-control test

v1.1.0-0bf1ea7-202604021227

Add ip mode to external-services for static IP endpoints (#740)

ExternalName services only support DNS names (CNAME records), not
raw IP addresses. Add an ip mode that creates a headless Service +
Endpoints with a static IP, enabling routing to host-network
services like Kind gateway IPs or bare-metal endpoints.

Spec format:
  external-services:
    my-service:
      ip: 172.18.0.1
      port: 8899

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>