k8s/aux: add cert-manager longhorn dashboard forge dev-tools and shadowsocks

- cert-manager ClusterIssuers (LetsEncrypt + homelab-ca)
- Longhorn storage dashboard
- Portainer dashboard config
- Forgejo git service
- Claude terminal remote access
- Shadowsocks tunnel for remote access

k8s/dev-tools/entrypoint.sh

@@ -0,0 +1,13 @@
+#!/bin/bash
+set -e
+
+# Start tmux server in background
+tmux new-session -d -s claude -c /root "bash"
+
+# Give tmux a moment to stabilize
+sleep 1
+
+# Start gotty serving the tmux session
+# -w: allow write (make terminal interactive)
+# -p 8080: listen on port 8080
+exec gotty -p 8080 -w tmux attach-session -t claude