[#699] split k8s platform body of work out of PFVCluster

Framework enforcement layer adopted; shellcheck clean; real kubeconfigs
gitignored (example only in repo). Provenance: PFVCluster/k8s.
https://projects.knownelement.com/issues/699#note-4536

wipe.sh

@@ -0,0 +1,52 @@
+#!/usr/bin/bash
+#
+# k8s/wipe.sh — remove existing k3s from all cnodes
+#
+# The current install on cnode1/2 uses LAN IP (192.168.3.x). We need to
+# rebuild with Tailscale IPs. This cluster has only system pods (16h old,
+# no user workloads), so a clean wipe is safe.
+#
+set -uo pipefail
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+# shellcheck source=./env.sh
+source "$SCRIPT_DIR/env.sh"
+
+echo "============================================"
+echo "  Wiping existing k3s from all cnodes"
+echo "============================================"
+
+for ip in "${ALL_CNODES[@]}"; do
+  echo ""
+  echo "--- $ip ---"
+  cn "$ip" '
+    # Stop services first
+    systemctl stop k3s 2>/dev/null || true
+    systemctl stop k3s-agent 2>/dev/null || true
+
+    # Server uninstall (also removes agents)
+    if [ -x /usr/local/bin/k3s-uninstall.sh ]; then
+      /usr/local/bin/k3s-uninstall.sh
+    elif [ -x /usr/local/bin/k3s-agent-uninstall.sh ]; then
+      /usr/local/bin/k3s-agent-uninstall.sh
+    else
+      echo "no k3s installed on this node"
+    fi
+
+    # Clean up residual state
+    rm -rf /etc/rancher/k3s /var/lib/rancher/k3s /var/lib/kubelet /var/lib/cni
+    rm -f /etc/systemd/system/k3s.service /etc/systemd/system/k3s-agent.service
+    systemctl daemon-reload
+
+    # Clean network interfaces left by k3s/flannel
+    ip link delete cni0 2>/dev/null || true
+    ip link delete flannel.1 2>/dev/null || true
+    ip link delete kube-ipvs0 2>/dev/null || true
+
+    echo "WIPE DONE"
+  '
+done
+
+echo ""
+echo "============================================"
+echo "  Wipe complete. Ready for bootstrap."
+echo "============================================"