write: 进 cube 仓库 + 接 gitea CI 自动部署

- 整 apps/write/ 进 git（含 frontend 源码 + Makefile + systemd unit + k8s service/ingress）
- .gitea/workflows/deploy-write.yml: act_runner fam 用户跑 host shell
    cargo build → npm build → install 到 ~/.local/bin/share/config →
    systemctl --user daemon-reload + restart → kubectl apply svc/ingress
- 前端 3 处"麻薯"字样去掉（思考中 / placeholder × 2）

注意 ~/.config/write/env 已有 passphrase，CI placeholder 逻辑会跳过不覆盖。

apps/write/k8s/all.yaml

@@ -0,0 +1,51 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: cube-write
+---
+# write runs as a systemd --user fam service on the host (it spawns `claude`
+# which uses Fam's OAuth credentials in ~/.claude). To expose it via traefik
+# we point a manual Endpoints object at the node-side of cni0 (10.42.0.1).
+apiVersion: v1
+kind: Service
+metadata:
+  name: write
+  namespace: cube-write
+spec:
+  ports:
+    - port: 80
+      targetPort: 31391
+      protocol: TCP
+      name: http
+---
+apiVersion: v1
+kind: Endpoints
+metadata:
+  name: write
+  namespace: cube-write
+subsets:
+  - addresses:
+      - ip: 10.42.0.1
+    ports:
+      - port: 31391
+        protocol: TCP
+        name: http
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: write
+  namespace: cube-write
+spec:
+  ingressClassName: traefik
+  rules:
+    - host: write.famzheng.me
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: write
+                port:
+                  number: 80