Gitea MCP connector: K8s manifests for public claude.ai integration

Shemot 28:3 — v'asu et bigdei Aharon l'kadesho l'chahano li.
The garments connect the service to those who approach.

- gitea-mcp-deployment.yaml: Official gitea-mcp server in HTTP mode
  Connects to Gitea at 185.19.29.94 via PAT
- gitea-mcp-ingress.yaml: TLS ingress at mcp.shorashim.ch
  cert-manager auto-provisions Let's Encrypt certificate
- gitea-mcp-secret.yaml: Template for Gitea PAT (never committed with value)
- cert-manager-issuer.yaml: Let's Encrypt ClusterIssuer

Architecture: claude.ai → OAuth → mcp.shorashim.ch → Gitea API

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

deploy/k8s/gitea-mcp-deployment.yaml

@@ -0,0 +1,80 @@
+# Gitea MCP Server — public connector for claude.ai
+#
+# Deploys the official Gitea MCP server (gitea.com/gitea/gitea-mcp)
+# in HTTP mode, exposing /mcp endpoint for Streamable HTTP transport.
+#
+# The MCP server connects to the Gitea backend at 185.19.29.94
+# using a Personal Access Token stored in gitea-mcp-secrets.
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: gitea-mcp
+  namespace: shorashim
+  labels:
+    app.kubernetes.io/name: gitea-mcp
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: gitea-mcp
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: gitea-mcp
+    spec:
+      containers:
+        - name: gitea-mcp
+          image: gitea/gitea-mcp-server:latest
+          args:
+            - "-t"
+            - "http"
+            - "--host"
+            - "http://185.19.29.94"
+            - "--port"
+            - "8080"
+          env:
+            - name: GITEA_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: gitea-mcp-secrets
+                  key: GITEA_TOKEN
+          ports:
+            - containerPort: 8080
+              name: http
+          resources:
+            requests:
+              memory: "64Mi"
+              cpu: "50m"
+            limits:
+              memory: "256Mi"
+              cpu: "250m"
+          livenessProbe:
+            httpGet:
+              path: /mcp
+              port: 8080
+            initialDelaySeconds: 10
+            periodSeconds: 30
+          readinessProbe:
+            httpGet:
+              path: /mcp
+              port: 8080
+            initialDelaySeconds: 5
+            periodSeconds: 10
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: gitea-mcp
+  namespace: shorashim
+  labels:
+    app.kubernetes.io/name: gitea-mcp
+spec:
+  type: ClusterIP
+  selector:
+    app.kubernetes.io/name: gitea-mcp
+  ports:
+    - port: 8080
+      targetPort: 8080
+      protocol: TCP
+      name: http