feat(fastpass): Talos cluster provisioning and bootstrap

- Terraform: VM provisioning, Unifi DHCP, Technitium DNS
- talhelper: cluster config for 6-node Talos cluster
- Cilium 1.19.4 CNI with Talos-compatible security context
- docs: city-hall setup guide and bootstrap runbook

terraform/talos/cluster/tfvars/fastpass.tfvars

@@ -0,0 +1,32 @@
+# ─── fastpass Cluster — Variable Values ──────────────────────────────────────
+# Copy to fastpass.tfvars and populate.
+# Sensitive values (passwords, tokens) are passed via CLI or environment:
+#
+#   terraform apply \
+#     -var-file="tfvars/fastpass.tfvars" \
+#     -state="states/fastpass.tfstate" \
+#     -var="proxmox_api_token=terraform@pve!terraform-token=<secret>" \
+#     -var="unifi_password=<secret>" \
+#     -var="technitium_password=<secret>"
+
+# ─── Proxmox ─────────────────────────────────────────────────────────────────
+proxmox_api_url   = "https://fantasyland.local.mk-labs.cloud:8006"
+
+# ─── Unifi ───────────────────────────────────────────────────────────────────
+unifi_api_url    = "https://10.1.71.1:443"
+unifi_username   = "terraform"
+
+# ─── Technitium DNS ───────────────────────────────────────────────────────────
+technitium_url      = "http://monorail.local.mk-labs.cloud:5380"
+
+# ─── Cluster ─────────────────────────────────────────────────────────────────
+cluster_name  = "fastpass"
+talos_version = "v1.13.2"
+dns_zone      = "local.mk-labs.cloud"
+
+# ─── ISO ─────────────────────────────────────────────────────────────────────
+iso_datastore = "templates"
+
+# ─── VM Defaults ─────────────────────────────────────────────────────────────
+datastore = "liberty-tree"
+bridge    = "vmbr0"