feat: 添加 Gitea Actions CI/CD — tag 驱动环境部署

- git push → 构建镜像 (sha-xxx) → 部署到 test (graphrag-test)
- git push --tags → 构建镜像 (vx.y.z) → 部署到 prod (graphrag-prod)
- DNS + hostAliases + nodeAffinity 固化到 deployment yaml
- 前后端均固定到 k8smaster 节点，便于 CI 导入 containerd 镜像

k8s/base/backend-deployment.yaml

@@ -17,6 +17,27 @@ spec:
         app: graphrag
         component: backend
     spec:
+      hostAliases:
+        - ip: "10.42.0.1"
+          hostnames:
+            - keycloak.plfai.cn
+      dnsConfig:
+        options:
+          - name: ndots
+            value: "1"
+          - name: timeout
+            value: "3"
+          - name: attempts
+            value: "2"
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: kubernetes.io/hostname
+                    operator: In
+                    values:
+                      - k8smaster
       containers:
         - name: backend
           image: registry.plfai.cn/graphrag-backend:latest

k8s/base/frontend-deployment.yaml

@@ -17,6 +17,23 @@ spec:
         app: graphrag
         component: frontend
     spec:
+      dnsConfig:
+        options:
+          - name: ndots
+            value: "1"
+          - name: timeout
+            value: "3"
+          - name: attempts
+            value: "2"
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: kubernetes.io/hostname
+                    operator: In
+                    values:
+                      - k8smaster
       containers:
         - name: frontend
           image: registry.plfai.cn/graphrag-frontend:latest