P5: Migrate devpi to Kubernetes (#34)

## Summary
- Migrate devpi PyPI caching proxy from indri LaunchAgent to Kubernetes
- Custom container image with devpi-server + devpi-web + auto-init
- StatefulSet with 50Gi PVC, Tailscale Ingress at pypi.tail8d86e.ts.net
- Remove devpi from ansible playbooks and update CLAUDE.md with k8s workflow

## Key Changes
- Add CRI-O registry mirror config for registry.tail8d86e.ts.net
- Change ArgoCD apps to manual sync (was auto-sync causing issues)
- 2Gi memory limit for Whoosh indexer (reclaimed after startup)

## Deployment and Testing
- [x] devpi pod healthy in k8s
- [x] pip install through proxy works
- [x] mcquack 1.0.0 uploaded and installable
- [x] Old devpi stopped on indri

## Post-Merge
Reset ArgoCD to main:
```
argocd app set apps --revision main && argocd app sync apps
argocd app set devpi --revision main && argocd app sync devpi
```

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Reviewed-on: https://forge.tail8d86e.ts.net/eblume/blumeops/pulls/34

ansible/roles/borgmatic/defaults/main.yml

@@ -11,13 +11,13 @@ borgmatic_schedule_hour: 2
 borgmatic_schedule_minute: 0
 
 # Source directories to back up
+# NOTE: devpi removed - now hosted in k8s (PVC handles persistence)
 borgmatic_source_directories:
   - /Users/erichblume/code/personal/zk
   - /opt/homebrew/var/forgejo
   - /Users/erichblume/.config/borgmatic
   - /Users/erichblume/Documents
   - /Users/erichblume/Pictures
-  - /Users/erichblume/devpi
   - /opt/homebrew/var/loki
 
 # Backup repository
@@ -28,9 +28,7 @@ borgmatic_repositories:
     append_only: true
 
 # Exclude patterns
-borgmatic_exclude_patterns:
-  # Exclude mirrored PyPI cache (only backup private packages)
-  - /Users/erichblume/devpi/+files/root/pypi
+borgmatic_exclude_patterns: []
 
 # Encryption passcommand (reads borg passphrase)
 borgmatic_encryption_passcommand: cat /Users/erichblume/.borg/config.yaml