feat: Terraform CI via Forgejo Actions + MinIO S3 state backend

- ArgoCD manages MinIO (phase 0), Terraform manages infrastructure
- Runner workflow: pulls state from S3, validates, plans, applies
- 34 resources imported to state, S3 backend operational
- Fixed AppProject repos, S3 endpoint deprecation, runner package manager

terraform/argocd-bootstrap.tf

@@ -164,7 +164,14 @@ resource "kubernetes_manifest" "argocd_project" {
     }
     spec = {
       sourceRepos = [
-        "https://forgejo.riotpiao.homelab.com/riotpiao.com/*"
+        "https://forgejo.riotpiao.homelab.com/riotpiao.com/*",
+        "https://charts.goauthentik.io",
+        "https://prometheus-community.github.io/helm-charts",
+        "https://grafana.github.io/helm-charts",
+        "https://grafana.github.io/loki/charts",
+        "https://charts.min.io/",
+        "https://strimzi.io/charts/",
+        "https://open-telemetry.github.io/opentelemetry-helm-charts"
       ]
       destinations = [
         {