lab1: 2 GiB workers, CAPMOX memory overcommit, CA install (Step 6), future-tasks

Owner's pending work, committed ahead of the pv1-2 change it underlies:
- lab1.yaml: worker template lab1-worker-2g (2048 MiB, decision #16), MD rollout
  maxSurge 0 / maxUnavailable 1, ProxmoxCluster schedulerHints.memoryAdjustment 160 (#17)
- cluster-autoscaler values: RBAC for proxmoxmachinetemplates, aggressive scale-down
  profile, Cilium startup-taint; runbook Steps 4-7 and troubleshooting rows
- inflate test pods 512Mi; decisions #16/#17; session note on the memory overcommit
- docs/future-tasks.md convention (CLAUDE.md, README) with the namespace-per-cluster task
- AGENTS.md; allowlist entries in .claude/settings.json

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

.claude/settings.json

@@ -26,7 +26,27 @@
       "Bash(ansible pve *)",
       "Read(//Users/jan.novak/**)",
       "Bash(export KUBECONFIG=/Users/jan.novak/srv/go/cluster-autoscaler-with-capi/.claude/cluster-inspector/kubeconfigs/lab-mgmt.kubeconfig)",
-      "Bash(kubectl explain *)"
+      "Bash(kubectl explain *)",
+      "Bash(grep -v '^ *$')",
+      "Bash(git ls-remote *)",
+      "Bash(awk -F/ '{print $3}')",
+      "Bash(curl -fsSL https://kubernetes.github.io/autoscaler/index.yaml)",
+      "Bash(awk '/^  cluster-autoscaler:/{f=1} f&&/appVersion:/{a=$2} f&&/^    version:/{print $2, a; n++} n>=6{exit}')",
+      "Bash(KUBECONFIG=/Users/jan.novak/srv/go/cluster-autoscaler-with-capi/.claude/cluster-inspector/kubeconfigs/lab-mgmt.kubeconfig kubectl get md lab1-workers -n default -o json)",
+      "Bash(clusterctl --kubeconfig /Users/jan.novak/srv/go/cluster-autoscaler-with-capi/.claude/cluster-inspector/kubeconfigs/lab-mgmt.kubeconfig describe cluster lab1 -n default --show-conditions all)",
+      "Bash(KUBECONFIG=/Users/jan.novak/srv/go/cluster-autoscaler-with-capi/.claude/cluster-inspector/kubeconfigs/lab-mgmt.kubeconfig kubectl get md lab1-workers -n default -o json --show-managed-fields)",
+      "Bash(export KUBECONFIG=$K)",
+      "Bash(helm show *)",
+      "Bash(grep -rniE 'backlog|future tasks|TODO' --include='*.md' . | head; sed -n '/## Key decisions/,/^## /p' README.md | head -5; grep -n 'docs/' README.md | head -20)",
+      "Bash(helm template *)",
+      "Bash(sed -e 's|^\\\\*\\\\*Created:\\\\*\\\\* .*|**Created:** 2026-09-29 23:15 CEST|' /Users/jan.novak/.claude/plans/purrfect-frolicking-lovelace.md > docs/plans/2026-09-29-2315-pv1-2-workers.md && head -3 docs/plans/2026-09-29-2315-pv1-2-workers.md)",
+      "WebSearch",
+      "WebFetch(domain:github.com)",
+      "Bash(git apply *)"
+    ],
+    "additionalDirectories": [
+      "/Users/jan.novak/srv/go/cluster-autoscaler-with-capi",
+      "/Users/jan.novak/srv/go/cluster-autoscaler-with-capi/docs/plans"
     ]
   }
 }