stem95su: scheduled Drive->site sync CronJob (every 10m)

CronJob stem95su-gdrive-sync (*/10) mounts the content PVC RW and
rclone-syncs the read-only Drive folder "claude" (stem claude/files) onto
it (rclone/rclone:1.74.3, scope=drive.readonly, empty-source guard +
--max-delete 25). ESO ExternalSecret stem95su-rclone <- Vault
secret/stem95su. Requires the GCP OAuth app published to Production or the
refresh token expires ~weekly.

Lands the gdrive-sync stack on master (it had landed on a feature branch
by accident on the shared devvm checkout).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

stacks/fire-planner/terragrunt.hcl

@@ -1,33 +0,0 @@
-include "root" {
-  path = find_in_parent_folders()
-}
-
-dependency "platform" {
-  config_path  = "../platform"
-  skip_outputs = true
-}
-
-dependency "vault" {
-  config_path  = "../vault"
-  skip_outputs = true
-}
-
-dependency "external-secrets" {
-  config_path  = "../external-secrets"
-  skip_outputs = true
-}
-
-dependency "dbaas" {
-  config_path  = "../dbaas"
-  skip_outputs = true
-}
-
-inputs = {
-  # fire-planner repo HEAD — bump on every deploy.
-  image_tag = "latest"
-
-  # Bulk ingest toggle — flip to true once, apply, monitor job, then reset to false.
-  run_examples_bulk_ingest = false
-  # qwen3-8b: GPU has ~10.7 GB free (immich-ml using ~4 GB of 15 GB total).
-  examples_llm_model = "qwen3-8b"
-}