extract remaining 19 modules from platform, complete stack split [ci skip]

Phase 3: all 27 platform modules now run as independent stacks.
Platform reduced to empty shell (outputs only) for backward compat
with 72 app stacks that declare dependency "platform".
Fixed technitium cross-module dashboard reference by copying file.
Woodpecker pipeline applies all 27+1 stacks in parallel via loop.
All applied with zero destroys.

stacks/sealed-secrets/main.tf

@@ -0,0 +1,4 @@
+module "sealed-secrets" {
+  source = "./modules/sealed-secrets"
+  tier   = local.tiers.cluster
+}

stacks/sealed-secrets/modules/sealed-secrets/main.tf

@@ -0,0 +1,45 @@
+variable "tier" { type = string }
+
+# -----------------------------------------------------------------------------
+# Namespace
+# -----------------------------------------------------------------------------
+resource "kubernetes_namespace" "sealed_secrets" {
+  metadata {
+    name = "sealed-secrets"
+    labels = {
+      tier = var.tier
+    }
+  }
+}
+
+# -----------------------------------------------------------------------------
+# Sealed Secrets — encrypts secrets for safe git storage
+# https://github.com/bitnami-labs/sealed-secrets
+# -----------------------------------------------------------------------------
+resource "helm_release" "sealed_secrets" {
+  namespace        = kubernetes_namespace.sealed_secrets.metadata[0].name
+  create_namespace = false
+  name             = "sealed-secrets"
+  atomic           = true
+  timeout          = 300
+
+  repository = "https://bitnami-labs.github.io/sealed-secrets"
+  chart      = "sealed-secrets"
+  version    = "2.18.3"
+
+  values = [yamlencode({
+    crds = {
+      create = true
+    }
+
+    resources = {
+      requests = {
+        cpu    = "50m"
+        memory = "192Mi"
+      }
+      limits = {
+        memory = "192Mi"
+      }
+    }
+  })]
+}

stacks/sealed-secrets/secrets

@@ -0,0 +1 @@
+../../secrets

stacks/sealed-secrets/terragrunt.hcl

@@ -0,0 +1,8 @@
+include "root" {
+  path = find_in_parent_folders()
+}
+
+dependency "infra" {
+  config_path  = "../infra"
+  skip_outputs = true
+}

stacks/sealed-secrets/tiers.tf

@@ -0,0 +1,10 @@
+# Generated by Terragrunt. Sig: nIlQXj57tbuaRZEa
+locals {
+  tiers = {
+    core    = "0-core"
+    cluster = "1-cluster"
+    gpu     = "2-gpu"
+    edge    = "3-edge"
+    aux     = "4-aux"
+  }
+}