feat: fix YAML field conversion, admin namespace, streaming logs, and vllm-serve deploy

- Fix Axios keysToSnake converting user values map keys (gpuMem -> gpu_mem)
  - Add skipRecurseKeys to keysToSnake for values/valuesYaml fields
  - Add values_yaml alt json tag and Normalize() in DTOs
  - Check both camelCase/snake_case in enforceNamespaceValues
  - Read both tailLines/tail_lines query param for diagnostics
- Admin users can freely choose namespace in LaunchModal (free-text input)
  - Block only kube-system/kube-public/kube-node-lease for admin
  - Regular users keep existing namespace restrictions
- Add SSE streaming pod logs endpoint (backend + frontend)
  - New PodLogStreamer interface and K8s Follow:true implementation
  - SSE handler with text/event-stream output
  - Frontend DiagnosticsModal: Stream button, auto-scroll, live indicator
- Remove per-card Refresh button from InstanceCard (redundant with page refresh)
- Deploy bge-m3 on vllm-serve 0.6.0 (gpuMem=10000, status=deployed)

backend/internal/domain/repository/instance_diagnostics_client.go

@@ -9,3 +9,9 @@ import (
 type InstanceDiagnosticsClient interface {
 	GetDiagnostics(ctx context.Context, cluster *entity.Cluster, instance *entity.Instance, tailLines int64) (*entity.InstanceDiagnostics, error)
 }
+
+// PodLogStreamer streams pod log lines over channels. The caller reads from the
+// lines channel until it is closed; errors are sent to the errs channel.
+type PodLogStreamer interface {
+	StreamPodLogs(ctx context.Context, cluster *entity.Cluster, namespace, podName, containerName string, tailLines int64) (<-chan string, <-chan error, error)
+}

backend/internal/domain/service/instance_service.go

@@ -395,6 +395,28 @@ func (s *InstanceService) GetInstanceDiagnostics(ctx context.Context, clusterID,
 	return s.diagClient.GetDiagnostics(ctx, cluster, instance, tailLines)
 }
 
+func (s *InstanceService) StreamInstanceLogs(ctx context.Context, clusterID, instanceID, podName, containerName string, tailLines int64) (<-chan string, <-chan error, error) {
+	instance, err := s.GetInstance(ctx, instanceID)
+	if err != nil {
+		return nil, nil, entity.ErrInstanceNotFound
+	}
+	if instance.ClusterID != clusterID {
+		return nil, nil, entity.ErrInstanceNotFound
+	}
+	cluster, err := s.clusterRepo.GetByID(ctx, clusterID)
+	if err != nil {
+		return nil, nil, entity.ErrClusterNotFound
+	}
+	if s.diagClient == nil {
+		return nil, nil, fmt.Errorf("instance diagnostics client is not configured")
+	}
+	streamer, ok := s.diagClient.(repository.PodLogStreamer)
+	if !ok {
+		return nil, nil, fmt.Errorf("diagnostics client does not support log streaming")
+	}
+	return streamer.StreamPodLogs(ctx, cluster, instance.Namespace, podName, containerName, tailLines)
+}
+
 func (s *InstanceService) canReadInstance(principal *authz.Principal, instance *entity.Instance) bool {
 	if principal.IsAdmin() {
 		return true
@@ -418,9 +440,12 @@ func enforceNamespaceValues(instance *entity.Instance) {
 	}
 	instance.Values["namespace"] = instance.Namespace
 	setExistingStringValue(instance.Values, "namespaceOverride", instance.Namespace)
+	setExistingStringValue(instance.Values, "namespace_override", instance.Namespace)
 	setExistingStringValue(instance.Values, "targetNamespace", instance.Namespace)
+	setExistingStringValue(instance.Values, "target_namespace", instance.Namespace)
 	setExistingNestedStringValue(instance.Values, "global", "namespace", instance.Namespace)
 	setExistingNestedStringValue(instance.Values, "global", "namespaceOverride", instance.Namespace)
+	setExistingNestedStringValue(instance.Values, "global", "namespace_override", instance.Namespace)
 }
 
 func setExistingStringValue(values map[string]interface{}, key, namespace string) {