stem95su: scheduled Drive->site sync CronJob (every 10m)

CronJob stem95su-gdrive-sync (*/10) mounts the content PVC RW and
rclone-syncs the read-only Drive folder "claude" (stem claude/files) onto
it (rclone/rclone:1.74.3, scope=drive.readonly, empty-source guard +
--max-delete 25). ESO ExternalSecret stem95su-rclone <- Vault
secret/stem95su. Requires the GCP OAuth app published to Production or the
refresh token expires ~weekly.

Lands the gdrive-sync stack on master (it had landed on a feature branch
by accident on the shared devvm checkout).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.github/workflows/build-diun.yml

@@ -1,28 +0,0 @@
-name: Build Custom DIUN Image
-
-on:
-  push:
-    branches: [master]
-    paths:
-      - 'stacks/diun/Dockerfile'
-  workflow_dispatch:
-
-jobs:
-  build:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: docker/setup-buildx-action@v3
-
-      - uses: docker/login-action@v3
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - uses: docker/build-push-action@v6
-        with:
-          context: stacks/diun
-          platforms: linux/amd64
-          push: true
-          tags: viktorbarzin/diun:latest

.github/workflows/deploy-postmortems.yml

@@ -1,32 +0,0 @@
-name: Deploy Post-Mortems to GitHub Pages
-
-on:
-  push:
-    branches: [master]
-    paths:
-      - 'post-mortems/**'
-  workflow_dispatch:
-
-permissions:
-  contents: read
-  pages: write
-  id-token: write
-
-concurrency:
-  group: pages
-  cancel-in-progress: false
-
-jobs:
-  deploy:
-    environment:
-      name: github-pages
-      url: ${{ steps.deployment.outputs.page_url }}
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/configure-pages@v5
-      - uses: actions/upload-pages-artifact@v3
-        with:
-          path: post-mortems
-      - id: deployment
-        uses: actions/deploy-pages@v4

.github/workflows/issue-automation.yml

@@ -1,56 +0,0 @@
-name: Issue Automation
-on:
-  issues:
-    types: [opened, labeled]
-
-jobs:
-  process-issue:
-    if: |
-      contains(github.event.issue.labels.*.name, 'user-report') ||
-      contains(github.event.issue.labels.*.name, 'feature-request')
-    runs-on: ubuntu-latest
-    steps:
-      - name: Check if author is collaborator
-        id: check-collab
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          RESPONSE=$(curl -s -o /dev/null -w "%{http_code}" \
-            -H "Authorization: token $GH_TOKEN" \
-            "https://api.github.com/repos/${{ github.repository }}/collaborators/${{ github.event.issue.user.login }}")
-          echo "is_collab=$([[ $RESPONSE == '204' ]] && echo 'true' || echo 'false')" >> $GITHUB_OUTPUT
-          echo "Author: ${{ github.event.issue.user.login }}, Collaborator: $RESPONSE"
-
-      - name: Queue for review (non-collaborator)
-        if: steps.check-collab.outputs.is_collab == 'false'
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          curl -s -X POST \
-            -H "Authorization: token $GH_TOKEN" \
-            "https://api.github.com/repos/${{ github.repository }}/issues/${{ github.event.issue.number }}/comments" \
-            -d '{"body": "Thanks for reporting! This has been queued for review by the infra team."}'
-          curl -s -X POST \
-            -H "Authorization: token $GH_TOKEN" \
-            "https://api.github.com/repos/${{ github.repository }}/issues/${{ github.event.issue.number }}/labels" \
-            -d '{"labels": ["needs-human"]}'
-
-      - name: Trigger Woodpecker pipeline (collaborator)
-        if: steps.check-collab.outputs.is_collab == 'true'
-        run: |
-          # Extract labels as comma-separated string
-          LABELS=$(echo '${{ toJSON(github.event.issue.labels.*.name) }}' | python3 -c "import sys,json; print(','.join(json.load(sys.stdin)))" 2>/dev/null || echo "unknown")
-
-          curl -sf -X POST \
-            -H "Authorization: Bearer ${{ secrets.WOODPECKER_TOKEN }}" \
-            "https://ci.viktorbarzin.me/api/repos/1/pipelines" \
-            -d "{
-              \"branch\": \"master\",
-              \"variables\": {
-                \"ISSUE_NUMBER\": \"${{ github.event.issue.number }}\",
-                \"ISSUE_TITLE\": $(echo '${{ github.event.issue.title }}' | python3 -c 'import sys,json; print(json.dumps(sys.stdin.read().strip()))'),
-                \"ISSUE_AUTHOR\": \"${{ github.event.issue.user.login }}\",
-                \"ISSUE_LABELS\": \"$LABELS\",
-                \"ISSUE_URL\": \"${{ github.event.issue.html_url }}\"
-              }
-            }"