feat: add kubeadm quickstart and release acceptance gate

[convee]

Summary

• add a kubeadm-only one-command quickstart with machine-readable install and value KPIs
• make local deployment idempotent and faster with parallel image builds, concise logs, and safe restart handling
• add source, package, Console, manifest, and full live E2E acceptance entry points
• harden the Rook object-store bootstrap and profile-aware network/storage validation
• document the standalone open-source experience and remove the stale security contact placeholder

Validation

• make verify: 833 tests plus manifests, Helm, Console build, clean wheel, and CLI entrypoints passed in 78s
• make e2e-local: 5/5 kubeadm/gVisor live scenarios passed in 46s
• clean cluster quickstart: 520s, 0 manual interventions
• reused cluster quickstart: 71s, 0 manual interventions
• kind is not installed or used; the only local profile is Lima + kubeadm + Cilium + gVisor

Notes

GitHub-hosted CI is currently not starting jobs because of the repository account billing/spending-limit state. Local release gates and live cluster E2E passed.