k8s/messaging: add kafka kmsvc and temporal workflows

- Kafka 3-broker cluster (RF=3, min-ISR=2)
- kmsvc SQS-like API on Kafka
- Redis dedup (standalone, can extend to HA)
- Temporal workflow orchestration (Cassandra backend)

k8s/sqs/environments/homelab.yaml

@@ -0,0 +1,29 @@
+# design.md §7b: cluster-specific values for the homelab environment.
+# No secrets here — Authentik client secret etc. flow through the existing
+# Vault/talos-cli pattern, referenced at deploy time, not inlined.
+namespace: sqs
+
+kafkaCluster:
+  nodePool:
+    replicas: 3
+    storage:
+      # longhorn-kafka now uses numberOfReplicas: 3 across 3 zone-labeled nodes.
+      class: longhorn-kafka
+      # Per-node headroom: with 3 nodes and existing PVCs, estimate ~100+ Gi total
+      # available. Each node hosts one replica of all 3 broker volumes, so 3 *
+      # sizeGi must fit. Monitor usage during Kafka deployment.
+      sizeGi: 10
+    resources:
+      memory: 5Gi
+      cpu: "2"
+
+redis:
+  storageClass: longhorn
+  memoryLimit: 1Gi
+
+managementService:
+  ingress:
+    host: kmsvc.riotpiao.homelab.com
+    clusterIssuer: homelab-ca
+  authentikIssuerURL: "https://authentik.riotpiao.homelab.com/application/o/kafaka/"
+  authentikAudience: "QI0gPtR99ar8VvhK8Tqox4SDkTKzbNU7lbgwBNSc"