feat(nowchess): add Kargo project, Rollouts deployment, and secrets

- 9 Kargo Warehouses (one per microservice), staging + prod stages
- PromotionTask: clone GitOps, kustomize-set-image, Gitea PR, ArgoCD sync
- BlueGreen Rollouts for all 9 services with health probes and envFrom
- staging,deployed / production,deployed Quarkus multi-profile support
- CORS_ORIGINS and QUARKUS_PROFILE injected via nowchess-env-config ConfigMap
- Plain K8s Secrets with empty values in secrets/nowchess/ (staging, prod, kargo)
- ArgoCD Applications for kargo project, staging, and prod deployments

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

secrets/kustomization.yaml

@@ -7,3 +7,13 @@ resources:
   - github/git-kargo-secret.yaml
   - github/git-nowchess-secret.yaml
   - github/git-pull-secret.yaml
+  - nowchess/staging/ghcr-pull-secret.yaml
+  - nowchess/staging/ncs-jwt-keys.yaml
+  - nowchess/staging/ncs-db-secrets.yaml
+  - nowchess/staging/ncs-internal-secret.yaml
+  - nowchess/prod/ghcr-pull-secret.yaml
+  - nowchess/prod/ncs-jwt-keys.yaml
+  - nowchess/prod/ncs-db-secrets.yaml
+  - nowchess/prod/ncs-internal-secret.yaml
+  - nowchess/kargo/git-secret.yaml
+  - nowchess/kargo/gitea-secret.yaml