update: fix docs

feat(infra): isolate k3s workers and internal nlb into dedicated subnet

feat(infra): isolate k3s workers and internal nlb into dedicated subnet

feat(infra): isolate k3s workers and internal nlb into dedicated subnet

feat(infra): add dynamic k3s workers scaling and internal load balancer

refactor(infra): migrate ansible inventory generation to dynamic templates

infra: delete useless folders

ci: add GitHub Actions workflow configuration

docs: fix readme

chore: update gitignore for terraform tools

refactor: isolate kubeconfig and remove legacy haproxy/tls workarounds

feat: refactor network topology, split security groups and add internal NLB stub (stage 6)

refactor(security): isolate k3s masters into private subnet and add dedicated bastion host - Removed public IPs from all k3s master nodes (`nat = false`) - Relocated `k3s_masters` compute instances entirely into `k3s_private_subnet` - Deployed a dedicated, preemptible `k3s-bastion` micro-VM in the public subnet as a single entry point - Updated `k3s_sg` security group to restrict inbound SSH (port 22) to `admin_allowed_ips` - Refactored `hosts.ini.tpl` and `local_file.ansible_inventory` to utilize the new jump host architecture - Fixed an IaC indexing bug that caused array-to-string serialization issues in the Ansible inventory generation

refactor(readme,ansible): remove wsl references and migrate to local_env

refactor: isolate kubeconfig and remove legacy haproxy/tls workarounds

feat: refactor network topology, split security groups and add internal NLB stub (stage 6)

refactor(security): isolate k3s masters into private subnet and add dedicated bastion host - Removed public IPs from all k3s master nodes (`nat = false`) - Relocated `k3s_masters` compute instances entirely into `k3s_private_subnet` - Deployed a dedicated, preemptible `k3s-bastion` micro-VM in the public subnet as a single entry point - Updated `k3s_sg` security group to restrict inbound SSH (port 22) to `admin_allowed_ips` - Refactored `hosts.ini.tpl` and `local_file.ansible_inventory` to utilize the new jump host architecture - Fixed an IaC indexing bug that caused array-to-string serialization issues in the Ansible inventory generation

refactor(readme,ansible): remove wsl references and migrate to local_env

refactor(infra): fix NLB IP extraction and inject inventory labels

refactor: isolate kubeconfig and remove legacy haproxy/tls workarounds

refactor

refactor: isolate kubeconfig and remove legacy haproxy/tls workarounds

feat: refactor network topology, split security groups and add internal NLB stub (stage 6)

refactor(security): isolate k3s masters into private subnet and add dedicated bastion host - Removed public IPs from all k3s master nodes (`nat = false`) - Relocated `k3s_masters` compute instances entirely into `k3s_private_subnet` - Deployed a dedicated, preemptible `k3s-bastion` micro-VM in the public subnet as a single entry point - Updated `k3s_sg` security group to restrict inbound SSH (port 22) to `admin_allowed_ips` - Refactored `hosts.ini.tpl` and `local_file.ansible_inventory` to utilize the new jump host architecture - Fixed an IaC indexing bug that caused array-to-string serialization issues in the Ansible inventory generation

refactor(security): isolate k3s masters into private subnet and add dedicated bastion host