feat(cicd): switch CI/CD from GitHub Actions to Gitea Actions

- Add .gitea/workflows/deploy.yaml (detect changes → docker build → Harbor push → kubectl deploy)
- Add gitea-sync-cronjob.yaml (GitHub → Gitea mirror sync every 5 min)
- Add act-runner-rbac.yaml (RBAC for act_runner to deploy to staging namespace)
- Add setup-secrets.sh (one-time cluster secret setup script)
- Disable GitHub Actions deploy-staging.yml (CI/CD now via Gitea)

Flow: GitHub push → Gitea sync (5min) → Gitea Actions → Docker build → Harbor → K8s

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.github/workflows/deploy-staging.yml

@@ -1,11 +1,21 @@
-# EN: Deploy GoodGo Platform MVP services to Kubernetes staging
-# VI: Trien khai cac service MVP cua GoodGo Platform len K8s staging
-name: Deploy to Staging
+# EN: DISABLED — CI/CD moved to Gitea Actions (gitea.techbi.org)
+# VI: DA TAT — CI/CD chuyen sang Gitea Actions (gitea.techbi.org)
+# See: .gitea/workflows/deploy.yaml
+name: Deploy to Staging (DISABLED)
 
 on:
-  push:
-    branches:
-      - master
+  workflow_dispatch:
+    inputs:
+      confirm:
+        description: 'This workflow is disabled. CI/CD runs via Gitea Actions.'
+        required: true
+        default: 'I understand'
+
+# Original trigger (disabled):
+# on:
+#   push:
+#     branches:
+#       - master
     paths:
       - 'services/iam-service-net/**'
       - 'services/merchant-service-net/**'