feat: Bark

[orangeshyguy21]

New Features

• Bark payment backend — Bark server, CLN hold and CDK Bark processor can be deployed as a cell, with core model/validation, Kubernetes adapters, native driver, generated secrets, schemas and CRD support.
• Bark images — Bark server, CLN hold and CDK Bark processor images ship with provenance records and golden-rendered manifests.
• Native Bark image build — a build script and a native amd64/arm64 CI workflow produce candidate images with retained source and checksums.
• Distributed catalog — a distributable-only catalog scope excludes local previews from installation prefetch, release inventory and ordinary qualification.

Note

Bark entries are in the runtime catalog only. Until their images are published, they are not prefetched or qualified.

Changes

• Native Bark startup — the server data lives in a private subdirectory, and CLN accepts the BIP39 HSM secret format.
• Acceptance gates — the Bark gates are reworked for funding, payments, recovery and transport.
• Host-tool cache — disposable acceptance installs can reuse verified host tools.
• Docs and checks — Bark docs and the check scripts are updated.

Bug Fixes

• None.

Testing

• New topology, kube adapter, golden-rendering, catalog-distribution, coverage-contract and generated-secrets tests.
• New shell tests for the Bark image build and catalog image scripts.