feat(frontend): add Helm chart browser, monitoring, chart-references and values templates pages

Add new frontend pages for the multi-tenant OCDP platform:

- Charts page (/charts): Browse Harbor OCI registries to list Helm chart repositories
  and versions, with deploy modal to launch charts on selected clusters
- Monitoring page (/monitoring): Display cluster metrics (CPU/Memory/GPU usage)
  and per-node details with resource utilization bars
- Chart References page (/chart-references): CRUD for chart metadata references
- Values Templates page (/templates): CRUD for Helm values templates with version
  history and rollback support
- Sidebar: Add Charts navigation, update Storage and Templates links
- api.ts: Add all API client functions (clusterApi, registryApi, instanceApi,
  monitoringApi, storageApi, chartReferenceApi, valuesTemplateApi,
  workspaceApi, userApi) with full TypeScript types

Note: deploy flow and values template rollback not yet end-to-end tested.

backend/internal/adapter/input/http/rest/cluster_handler.go

@@ -40,13 +40,20 @@ func (h *ClusterHandler) CreateCluster(w http.ResponseWriter, r *http.Request) {
 		respondError(w, http.StatusBadRequest, "Invalid request body", err.Error())
 		return
 	}
-	req.Normalize()
+		req.Normalize()
 
 	// 创建实体
-	cluster := entity.NewCluster(req.Name, req.Host)
+	cluster := entity.NewCluster("", "", req.Name, req.Host)
 	cluster.Description = req.Description
 
-	if req.CertData != "" && req.KeyData != "" {
+	// 设置认证信息
+	hasKubeconfig := req.CAData != "" && (len(req.CAData) > 100 && (req.CAData[:11] == "apiVersion:" || req.CAData[:5] == "kind:"))
+	hasCertAuth := req.CertData != "" && req.KeyData != ""
+
+	if hasKubeconfig {
+		// 使用完整的 kubeconfig 格式
+		cluster.CAData = req.CAData
+	} else if hasCertAuth {
 		cluster.SetCertAuth(req.CAData, req.CertData, req.KeyData)
 	} else if req.Token != "" {
 		cluster.SetTokenAuth(req.Token)
@@ -57,6 +64,18 @@ func (h *ClusterHandler) CreateCluster(w http.ResponseWriter, r *http.Request) {
 			"LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1vY2sgQ2xpZW50IENlcnRpZmljYXRlCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0=",
 			"LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNb2NrIFByaXZhdGUgS2V5Ci0tLS0tRU5EIFJTQSBQUklWQVRFIEtFWS0tLS0t",
 		)
+	} else {
+		// 生产模式：没有提供凭证，尝试使用本地 kubeconfig
+		// 不再返回错误，让 TestConnection 尝试使用本地 kubeconfig
+		// cluster 保持空的认证信息，TestConnection 会使用 KUBECONFIG 环境变量
+	}
+
+	// 测试集群连接（非 mock 模式下）
+	if os.Getenv("ADAPTER_MODE") != "mock" {
+		if err := h.clusterService.TestConnection(r.Context(), cluster); err != nil {
+			respondError(w, http.StatusBadRequest, "Failed to connect to cluster", err.Error())
+			return
+		}
 	}
 
 	// 调用领域服务
@@ -198,18 +217,24 @@ func (h *ClusterHandler) GetClusterHealth(w http.ResponseWriter, r *http.Request
 	vars := mux.Vars(r)
 	clusterID := vars["cluster_id"]
 
-	// 检查集群是否存在
-	_, err := h.clusterService.GetCluster(r.Context(), clusterID)
+	// 获取集群
+	cluster, err := h.clusterService.GetCluster(r.Context(), clusterID)
 	if err != nil {
 		respondError(w, http.StatusNotFound, "Cluster not found", err.Error())
 		return
 	}
 
-	// TODO: 实现真实的健康检查
+	// 测试连接
+	err = h.clusterService.TestConnection(r.Context(), cluster)
+
 	response := &dto.ClusterHealthResponse{
-		Healthy: true,
-		Message: "Cluster is healthy",
-		Version: "v1.28.0",
+		Healthy: err == nil,
+	}
+
+	if err != nil {
+		response.Message = err.Error()
+	} else {
+		response.Message = "Cluster is healthy"
 	}
 
 	respondJSON(w, http.StatusOK, response)