task-11: complete QA + hardening with resilience fixes

- Created comprehensive QA checklist covering edge cases (missing EXIF, timezones, codecs, corrupt files)
- Added ErrorBoundary component wrapped around TimelineTree and MediaPanel
- Created global error.tsx page for unhandled errors
- Improved failed asset UX with red borders, warning icons, and inline error display
- Added loading skeletons to TimelineTree and MediaPanel
- Added retry button for failed media loads
- Created DEPLOYMENT_VALIDATION.md with validation commands and checklist
- Applied k8s recommendations:
  - Changed node affinity to required for compute nodes (Pi 5)
  - Enabled Tailscale LoadBalancer service for MinIO S3 (reliable Range requests)
  - Enabled cleanup CronJob for staging files

.tmp-values.yaml

@@ -0,0 +1,25 @@
+secrets:
+  postgres:
+    password: "change-me"
+  minio:
+    accessKeyId: "minioadmin"
+    secretAccessKey: "minioadmin"
+
+images:
+  web:
+    repository: registry.lan:5000/tline-web
+    tag: dev
+  worker:
+    repository: registry.lan:5000/tline-worker
+    tag: dev
+
+global:
+  tailscale:
+    tailnetFQDN: "tailxyz.ts.net"
+
+registrySecret:
+  create: true
+  server: "registry.lan:5000"
+  username: "u"
+  password: "p"
+  email: "e@example.com"