feat: CI/CD pipeline + Learning/Medicine/Travel services

- Add Gitea Actions workflow for automated build & deploy
- Add K8s manifests: webui, travel-svc, medicine-svc, sandbox-svc
- Update kustomization for localhost:5000 registry
- Add ingress for gooseek.ru and api.gooseek.ru
- Learning cabinet with onboarding, courses, sandbox integration
- Medicine service with symptom analysis and doctor matching
- Travel service with itinerary planning
- Server setup scripts (NVIDIA/CUDA, K3s, Gitea runner)

Made-with: Cursor

backend/deploy/k8s/sandbox-svc.yaml

@@ -0,0 +1,70 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: sandbox-svc
+  namespace: gooseek
+  labels:
+    app: sandbox-svc
+    app.kubernetes.io/name: sandbox-svc
+    app.kubernetes.io/part-of: gooseek
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: sandbox-svc
+  template:
+    metadata:
+      labels:
+        app: sandbox-svc
+    spec:
+      containers:
+      - name: sandbox-svc
+        image: gooseek/backend:latest
+        env:
+        - name: SERVICE
+          value: "sandbox-svc"
+        - name: PORT
+          value: "3036"
+        - name: OPENSANDBOX_URL
+          value: "http://opensandbox-server:8080"
+        envFrom:
+        - configMapRef:
+            name: gooseek-config
+        - secretRef:
+            name: gooseek-secrets
+        ports:
+        - containerPort: 3036
+          name: http
+        livenessProbe:
+          httpGet:
+            path: /health
+            port: 3036
+          initialDelaySeconds: 10
+          periodSeconds: 20
+        readinessProbe:
+          httpGet:
+            path: /health
+            port: 3036
+          initialDelaySeconds: 5
+          periodSeconds: 15
+        resources:
+          requests:
+            cpu: 100m
+            memory: 128Mi
+          limits:
+            cpu: 500m
+            memory: 256Mi
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: sandbox-svc
+  namespace: gooseek
+spec:
+  type: ClusterIP
+  selector:
+    app: sandbox-svc
+  ports:
+  - port: 3036
+    targetPort: 3036
+    name: http