Add OpenShift manifests for in-cluster build and runtime
- build chain: project, Gitea basic-auth source secret, output ImageStream,
BuildConfig (Docker strategy, ubuntu:24.04 base), optional base-image
ImageStream and Docker Hub pull secret
- runtime: ServiceAccount + least-privilege SCC and its RoleBinding (VShell
needs UID 0), PVC for config/certificate, Deployment with ImageStream
trigger, ClusterIP Service, passthrough HTTPS Route
- all manifests verified with 'oc create --dry-run=client' against the
OpenShift 4.22 client scheme (12/12 decode cleanly)