feat: CI/CD pipeline + Learning/Medicine/Travel services

- Add Gitea Actions workflow for automated build & deploy
- Add K8s manifests: webui, travel-svc, medicine-svc, sandbox-svc
- Update kustomization for localhost:5000 registry
- Add ingress for gooseek.ru and api.gooseek.ru
- Learning cabinet with onboarding, courses, sandbox integration
- Medicine service with symptom analysis and doctor matching
- Travel service with itinerary planning
- Server setup scripts (NVIDIA/CUDA, K3s, Gitea runner)

Made-with: Cursor

.gitignore

@@ -1,24 +1,29 @@
 # Node.js
 node_modules/
+**/node_modules/
 npm-debug.log
 yarn-error.log
+package-lock.json
 
 # Build output
 .next/
+**/.next/
 out/
 dist/
+**/dist/
+*.tsbuildinfo
 
 # IDE/Editor specific
 .vscode/
 .idea/
 *.iml
+*.swp
+*.swo
 
-# Environment variables
+# Environment variables (SECRETS - NEVER COMMIT!)
 .env
-.env.local
-.env.development.local
-.env.test.local
-.env.production.local
+.env.*
+!.env.example
 
 # Config files
 config.toml
@@ -29,22 +34,41 @@ logs/
 
 # Testing
 /coverage/
+**/coverage/
 
 # Miscellaneous
 .DS_Store
 Thumbs.db
+*.bak
+*.tmp
 
 # Db & data
 db.sqlite
+*.sqlite
 apps/frontend/data/*
 !apps/frontend/data/.gitignore
 /searxng
 
-certificates
+# Certificates and secrets
+certificates/
+*.pem
+*.key
+*.crt
 
-# SSL backup (приватные ключи не в репо)
+# SSL backup
 deploy/k3s/ssl/backup/*
 !deploy/k3s/ssl/backup/.gitkeep
 
-# Vendor cache (npm + Docker images для оффлайн-билда)
-vendor/
+# Vendor cache
+vendor/
+
+# CI/CD temp files
+.runner
+*.runner
+
+# K8s secrets (generated)
+backend/deploy/k8s/*-secrets.yaml
+
+# Go
+backend/cmd/*/main
+backend/**/*.exe