[FEATURE] Add KCL claim template for Kubernetes application deployment

[patrick-hermann-sva]

Affected Spec Section

New claim template addition - extends the existing claim-templates functionality.

Description

Add a new KCL-based Crossplane claim template for deploying a complete Kubernetes application stack with the following resources:

• Deployment - Application workload definition
• Service - Internal service exposure
• Ingress - External HTTP/HTTPS routing
• ConfigMap - Non-sensitive configuration data
• Secret - Sensitive configuration data (passwords, API keys, certificates)
• ServiceAccount - Pod identity for RBAC

Requirements

• Create KCL schema with configurable parameters for all resources
• Deployment: image, replicas, resources (cpu/memory), environment variables, probes
• Service: port mapping, service type (ClusterIP/NodePort/LoadBalancer)
• Ingress: hostname, TLS configuration, path routing
• ConfigMap: key-value pairs for application configuration
• Secret: key-value pairs for sensitive data (with proper encoding)
• ServiceAccount: name, annotations (for workload identity/IRSA)
• Support namespace configuration
• Support common labels and annotations across all resources
• Provide sensible defaults for quick deployment

Acceptance Criteria

• KCL template renders valid Kubernetes manifests
• All parameters have proper validation rules
• Default values allow "Enter-Enter" workflow
• Template is documented with parameter descriptions
• Integration tests pass
• Template works with claim-machinery-api endpoints

Complexity

Medium (2-5 days)