chore: add CodeRabbit AI review config

[Varashi]

Summary

• Adds .coderabbit.yaml, assertive profile.
• Tools: ruff, pylint, checkov, gitleaks, hadolint, yamllint.
• Path-instructions flag kopf handler idempotency, pyvmomi session leaks, partial-state risk in maintenance state machine.

Test plan

• CodeRabbit posts walkthrough on this PR
• ruff/pylint surface on controller.py edits
• checkov runs on chart/ Helm values

Summary by CodeRabbit

• Chores
  • Added configuration for automated code reviews with targeted guidance across the codebase and integrated quality analysis tools.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: f9e1880b-9e63-46cd-b513-bb55f20cbf62

📥 Commits

Reviewing files that changed from the base of the PR and between 3ae1aba and c570791.

📒 Files selected for processing (1)

• .coderabbit.yaml

---

📝 Walkthrough

Walkthrough

Added .coderabbit.yaml configuration enabling incremental automated code reviews. Specifies English language and terse tone, assertive review profile, repository path exclusions, path-specific guidance for controller/Dockerfile/Helm charts, auto-review with draft suppression on main, and integrated lint/security tooling (ruff, pylint, gitleaks, hadolint, checkov) with chat auto-replies and local knowledge base scopes.

Changes

CodeRabbit Configuration Setup

Layer / File(s)	Summary
Global review settings and path filters .coderabbit.yaml	Language, tone, and early-access flags set globally. Review profile (assertive), workflow toggles (no request-changes), summary output, and multi-path exclusions (docs, changelog, caches, pyc, renovate.json) configured.
Path-specific review instructions .coderabbit.yaml	Targeted guidance added for controller.py, Dockerfile, chart/**, and chart/**/values.yaml with safety and configuration defaults per path.
Auto-review automation settings .coderabbit.yaml	Auto-review enabled with incremental updates, ignored title keywords, base branch main, and bot username exclusions.
Tool integration and auxiliary features .coderabbit.yaml	Enables ruff, pylint, gitleaks, hadolint, checkov; disables markdownlint and languagetool. Finishes docstring and unit test checks disabled. Chat auto-replies and local-scope knowledge base learning/issue/pull-request handling enabled.

---

🎯 2 (Simple) | ⏱️ ~10 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	Title directly reflects the main change: adding CodeRabbit configuration file. Clear, specific, and matches the primary changeset.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}