docs(talos): add native machineconfig migration design spec

[jazzlyn]

• Retire talhelper in favor of native talosctl gen config + patches
• Move Talos secrets from SOPS-in-git to OpenBao (infra/techtales/talos/main/secrets), rendered at apply time
• Design spec for review before implementation

Refs #8767

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[tyriis-automation]

✅MegaLinter analysis: Success

Descriptor	Linter	Files	Fixed	Errors	Max errors	Warnings	Elapsed time
✅ REPOSITORY	betterleaks	yes		no		no	0.89s

See detailed reports in MegaLinter artifacts
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is provided by OX Security
Show us your support by starring ⭐ the repository

[tyriis-automation]

konflate — summary

Note

✅ No rendered changes.

View the full rendered diff →

_{konflate · rendered b66bbda · advisory, not a gate}