[LLK AI codegen] Infrastructure provisioning — VM, object storage, Entra, registry

[mvlahovicTT]

What this covers

All the IT-side prerequisites for hosting rtl-search:

• GitLab repo + container registry
• Proxmox VM (our internal VM provisioning ticket)
• Entra app registration + allowed group
• Object storage bucket (our internal object-storage ticket)
• s3fs-fuse mount + bind into rtl-search
• Initial doc upload
• Full SSO smoke test

Driving Slack thread: service owner ↔ IT engineer, 2026-04-08 onward. Driving Jira tickets: our internal VM provisioning ticket (VM), our internal object-storage ticket (object storage).

Most is done; #7.6 / #7.7 / #7.8 are the remaining gates before turnover.