[justinwilkin]

Adds the quickstart and the first two examples for kora 0.11.0-rc.5.

Changes

• Tooling: versions.mk pins kora, Istio, SPIRE, External Secrets Operator and k3s. make validate checks every manifest against the Kubernetes, kora and External Secrets Operator schemas, and CI runs it on each pull request.
• quickstart/: make up installs kora on a local k3d cluster with Istio, SPIRE, Postgres, Redis, Dex and External Secrets Operator. It then asks which example to apply. Model providers for OpenRouter and Ollama ship commented out.
• single-tenant/: One tenant with a PR summariser agent, an environment on the bundled kora-python image, a GitHub trigger source, a webhook trigger, a manual trigger and a team role.
• multi-tenant/: Separate tenants and repositories for an engineering team and an SRE team, with four use cases, a GitHub connection, an Exa MCP server and a routed Slack trigger. make example checks the Exa key and the GitHub App settings before it applies.

Both examples declare four models: Claude Haiku 5.5, DeepSeek V4.1 Flash and GPT-6 Luna through OpenRouter, and gpt-oss 20B through Ollama.

Testing

• make validate passes against the published 0.11.0-rc.5 CRDs.
• make up EXAMPLE=single-tenant ran end to end on rc.4 and rc.5 with Ollama. A fired summarise-pr run completed.
• The multi-tenant platform and tenant repositories apply and reconcile. Their agents need the Exa key and a GitHub App to become ready.
• Not yet tested: the OpenRouter models end to end.