Add lab1 workload cluster manifest; workers sized 4 vCPU / 4 GiB

Generated with clusterctl v1.12.11 + the six runbook edits (pod CIDR,
kube-vip v1.2.4, no qcow2, VLAN 4, worker size, no MD replicas); passes
server-side dry run. Inflate test pods lowered to 1Gi to stay CPU-bound,
capacity annotation 4Gi, decision #15.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

.claude/settings.json

@@ -18,7 +18,11 @@
       "Bash(clusterctl generate *)",
       "Bash(ansible mgmt *)",
       "Bash(kubectl get *)",
-      "Bash(kubectl auth *)"
+      "Bash(kubectl auth *)",
+      "Bash(ansible pve *)",
+      "Read(//Users/jan.novak/**)",
+      "Bash(export KUBECONFIG=/Users/jan.novak/srv/go/cluster-autoscaler-with-capi/.claude/cluster-inspector/kubeconfigs/lab-mgmt.kubeconfig)",
+      "Bash(kubectl explain *)"
     ]
   }
 }