feat: platform backbone and field capture, first part (checkpoint)

Platform backbone (plan 2026-10-13-plattform-rueckgrat), reviewed tasks:
- run roles api/worker/job/all with shared startup checks (Task 1)
- schema and migration for DomainEvent, deliveries, JobRun, ThrottlerHit (Task 2)
- audit, notifications and domain events written in the same transaction (Task 3)
- dispatcher with SKIP LOCKED claims, retries and stale release (Task 4)
- worker building blocks: tick, LISTEN/NOTIFY wake-up, health (Task 5)
- worker process and entry points (Task 6)
- throttler counters in Postgres (Task 19)
- separate keys per purpose with key ring (Task 20)
- public origin page without exact location (Task 22)
- shop keys split into read and write (Task 23)
- Kustomize base, components, overlay encry, CI validation (Task 26)

Field capture T3 (plan 2026-10-13-t3-erfassung-am-stand), reviewed tasks:
- brood frames, read endpoints, apiary overview and offline pack
- network basics, offline queue v3, navigation sheets, form building blocks
- new inspection with last-time hints and weather, varroa per day,
  treatment prefill, apiary page with round
- inspection photo (Task 10) is implemented, review pending

Not rolled out. Remaining tasks follow in later commits.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

deploy/k8s/components/api-hpa/hpa.yaml

@@ -0,0 +1,18 @@
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: apicore-backend
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: apicore-backend
+  minReplicas: 1
+  maxReplicas: 2
+  metrics:
+    - type: Resource
+      resource:
+        name: cpu
+        target:
+          type: Utilization
+          averageUtilization: 70

deploy/k8s/components/api-hpa/kustomization.yaml

@@ -0,0 +1,16 @@
+# HPA fuer die api: 1-2 Pods bei 70 % CPU (Spec 2026-10-12 Abschnitt 7).
+# Voraussetzungen: CPU-Requests (components/backend-roles) und der Throttler
+# ueber die DB, damit Limits ueber beide Pods zaehlen. Rollout: Runbook Schritt 5.
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+resources:
+  - hpa.yaml
+patches:
+  # Ohne replicas im Deployment setzt ein apply die Pod-Zahl nicht auf 1
+  # zurueck, die der HPA gerade gewaehlt hat.
+  - path: patch-api-replicas.yaml
+    target:
+      group: apps
+      version: v1
+      kind: Deployment
+      name: apicore-backend

deploy/k8s/components/api-hpa/patch-api-replicas.yaml

@@ -0,0 +1,2 @@
+- op: remove
+  path: /spec/replicas