feat(openclaw): add shopping, supermarket deals, geizhals, and ebay MCP tools

k8s/README.md

@@ -160,6 +160,27 @@ velero backup get
 ```
 
 
+## authentik (auth)
+
+Authentik is the central SSO and identity provider deployed at [auth.haumdaucher.de](https://auth.haumdaucher.de).
+See full documentation in [k8s/auth/README.md](./auth/README.md) and [k8s/auth/MACHINE_AUTH.md](./auth/MACHINE_AUTH.md).
+
+```sh
+# 1. Create namespace & CNPG PostgreSQL cluster
+kubectl create namespace auth
+kubectl apply -f auth/authentik-db.yaml
+
+# 2. Deploy Authentik via Helm
+helm repo add authentik https://charts.goauthentik.io
+helm repo update
+helm upgrade --install authentik authentik/authentik \
+  --namespace auth \
+  -f auth/authentik.secret.values.yaml
+
+# 3. Deploy Traefik ForwardAuth Middleware
+kubectl apply -f auth/traefik-forwardauth-middleware.yaml
+```
+
 ## coder
 
 Coder is a code server see [https://coder.com/docs/v2/latest/install/kubernetes](https://coder.com/docs/v2/latest/install/kubernetes).
@@ -841,3 +862,47 @@ helm upgrade --install zigbee2mqtt zigbee2mqtt/zigbee2mqtt --create-namespace -n
 ```
 
 To modify configurations (like `devices`, `throttle`, or `mqtt`), edit `zigbee/zigbee2mqtt.secret.values.yaml` and re-run the `helm upgrade` command. The chart automatically handles merging these values into the persistent volume on startup.
+
+## Grabengasse 7 Website (`grabengasse7.de`)
+
+Grabengasse 7 home website and backend service deployed in the `grabengasse` namespace. Exposes outdoor weather metrics from the Shelly WS90 station with interactive 24h charts.
+
+### Build and Push Container Images
+
+```bash
+# Login to local registry (if not already logged in)
+docker login registry.haumdaucher.de -u moritz -p "PPf10musSh!!"
+
+# Build and push backend image
+cd website/grabengasse_backend
+make all
+
+# Build and push frontend image
+cd ../grabengasse_frontend
+make all
+```
+
+### Deploy to Kubernetes
+
+```bash
+# Create namespace and registry secret
+kubectl apply -f k8s/grabengasse/namespace.yaml
+kubectl apply -f k8s/grabengasse/registry.secret.yaml
+
+# Deploy backend, frontend, and ingress
+kubectl apply -f k8s/grabengasse/backend.yaml
+kubectl apply -f k8s/grabengasse/frontend.yaml
+kubectl apply -f k8s/grabengasse/ingress.yaml
+```
+
+### Verification
+
+```bash
+# Verify pod statuses
+kubectl get pods -n grabengasse
+
+# Check backend health
+curl -k https://grabengasse7.de/api/v1/healthz
+curl -k https://grabengasse7.de/api/v1/weather/current
+```
+