feat(minecraft): deploy journey-into-imagination PaperMC server

- PaperMC 26.1.2 via itzg/minecraft-server:2026.7.0
- Namespace: minecraft, Service: journey-into-imagination
- TCP port 10182 (non-standard) via ingress-nginx tcp forwarding
- Pure Storage CSI PVC (pure-block, 50Gi) for world data
- World seed hardcoded: -5177989977648707969
- RCON password via ExternalSecret + 1Password Connect
- SleepMost v5.6.2 plugin for single-player sleep
- Whitelist off at launch, toggle-ready
- ExternalDNS annotations for internal Technitium record
- Manual steps: UniFi port forward WAN:10182→10.1.71.80:10182,
  Cloudflare A record + SRV for journey-into-imagination.mk-labs.cloud

cluster/applications/minecraft/service.yaml

@@ -0,0 +1,30 @@
+---
+# Service named after the thematic identity: journey-into-imagination
+# This is the DNS name used in ingress-nginx TCP forwarding config.
+# Internal DNS: journey-into-imagination.local.mk-labs.cloud
+apiVersion: v1
+kind: Service
+metadata:
+  name: journey-into-imagination
+  namespace: minecraft
+  labels:
+    app.kubernetes.io/name: minecraft
+    app.kubernetes.io/component: papermc
+  annotations:
+    # Internal DNS via ExternalDNS + Technitium
+    external-dns.alpha.kubernetes.io/hostname: journey-into-imagination.local.mk-labs.cloud
+    # Non-standard external port 10182 → internal 25565 (via ingress-nginx tcp forwarding)
+spec:
+  type: ClusterIP
+  selector:
+    app.kubernetes.io/name: minecraft
+    app.kubernetes.io/component: papermc
+  ports:
+    - name: minecraft
+      port: 25565
+      targetPort: 25565
+      protocol: TCP
+    - name: rcon
+      port: 25575
+      targetPort: 25575
+      protocol: TCP