svcforge: reference implementation

Complete working build of the system learn-python/ teaches.
164 tests, mypy --strict clean, domain coverage 99%.

deploy/chart/templates/prometheusrule.yaml

@@ -0,0 +1,21 @@
+{{- if .Values.prometheusRule.enabled }}
+{{/*
+The four alerts, rendered straight from values. The rules are data, not template logic —
+which is the point: an alert you want to change is a values edit and a diff, not a new
+CR someone applied by hand and forgot.
+
+Each maps to a RUNBOOK.md entry via its runbook_url annotation. An alert without a runbook
+entry is a pager that teaches nothing.
+*/}}
+apiVersion: monitoring.coreos.com/v1
+kind: PrometheusRule
+metadata:
+  name: {{ include "svcforge.fullname" . }}
+  labels:
+    {{- include "svcforge.labels" . | nindent 4 }}
+spec:
+  groups:
+    - name: svcforge
+      rules:
+        {{- toYaml .Values.prometheusRule.rules | nindent 8 }}
+{{- end }}