feat(nowchess): add Kargo project, Rollouts deployment, and secrets

- 9 Kargo Warehouses (one per microservice), staging + prod stages
- PromotionTask: clone GitOps, kustomize-set-image, Gitea PR, ArgoCD sync
- BlueGreen Rollouts for all 9 services with health probes and envFrom
- staging,deployed / production,deployed Quarkus multi-profile support
- CORS_ORIGINS and QUARKUS_PROFILE injected via nowchess-env-config ConfigMap
- Plain K8s Secrets with empty values in secrets/nowchess/ (staging, prod, kargo)
- ArgoCD Applications for kargo project, staging, and prod deployments

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

nowchess/eu-central-1-prod/kustomization.yaml

@@ -0,0 +1,42 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: nowchess
+resources:
+  - ../base
+  - ingress.yaml
+patches:
+  - patch: |-
+      apiVersion: v1
+      kind: ConfigMap
+      metadata:
+        name: nowchess-env-config
+      data:
+        QUARKUS_PROFILE: production,deployed
+        CORS_ORIGINS: https://nowchess.janis-eccarius.de
+        NOWCHESS_COORDINATOR_ENABLED: "true"
+    target:
+      kind: ConfigMap
+      name: nowchess-env-config
+images:
+  - name: ghcr.io/now-chess/now-chess-systems/account
+    newTag: latest
+  - name: ghcr.io/now-chess/now-chess-systems/bot-platform
+    newTag: latest
+  - name: ghcr.io/now-chess/now-chess-systems/coordinator
+    newTag: latest
+  - name: ghcr.io/now-chess/now-chess-systems/core
+    newTag: latest
+  - name: ghcr.io/now-chess/now-chess-systems/io
+    newTag: latest
+  - name: ghcr.io/now-chess/now-chess-systems/official-bots
+    newTag: latest
+  - name: ghcr.io/now-chess/now-chess-systems/rule
+    newTag: latest
+  - name: ghcr.io/now-chess/now-chess-systems/store
+    newTag: latest
+  - name: ghcr.io/now-chess/now-chess-systems/ws
+    newTag: latest
+configurations:
+  - rollout-transform.yaml
+openapi:
+  path: argo_all_k8s_kustomize_schema.json