feat(awx): scaffold AWX deployment scripts and manifests

Create top-level awx/ directory with k3s install script, AWX operator +
instance deployment script, namespace manifest, and AWX custom resource
(LoadBalancer service type, bundled PostgreSQL on local-path).

Target: tsys-awx.knel.net (VMID 600 on pfv-tsys6, 4c/12GB/60GB disk).

💘 Generated with Crush

Assisted-by: Crush:glm-5.2

awx/awx-instance.yaml

@@ -0,0 +1,48 @@
+---
+# AWX namespace
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: awx
+---
+# Admin password secret — the password is 'REDACTED_PASSWORD' (fleet standard)
+apiVersion: v1
+kind: Secret
+metadata:
+  name: awx-admin-password
+  namespace: awx
+type: Opaque
+stringData:
+  password: REDACTED_PASSWORD
+---
+# AWX Custom Resource — single instance, LoadBalancer service
+apiVersion: awx.ansible.com/v1beta1
+kind: AWX
+metadata:
+  name: tsys-awx
+  namespace: awx
+spec:
+  service_type: LoadBalancer
+  ingress_type: none
+
+  admin_user: admin
+  admin_password_secret: awx-admin-password
+
+  # PostgreSQL — bundled, stored on local disk via PVC (k3s local-path)
+  postgres_storage_class: local-path
+  postgres_data_volume_size: 8Gi
+  postgres_resource_requirements:
+    requests:
+      memory: 1Gi
+
+  # Resource limits — fit within 12 GB host RAM
+  web_resource_requirements:
+    requests:
+      memory: 1Gi
+  task_resource_requirements:
+    requests:
+      memory: 1Gi
+
+  # Annotations for LoadBalancer (k3s ServiceLB)
+  service_annotations:
+    metallb.io/address-pool: ""