…time)

Replace the gRPC-based galactic-agent DaemonSet with a controller-runtime based galactic-router.

Key changes:

- Remove internal/agent, internal/bootstrap, internal/gobgp packages
- Add internal/controller with BGPRouter, BGPPeer, BGPAdvertisement, BGPPolicy, Secret, Node reconcilers
- Add internal/reconcile for CRD-to-DesiredRouter translation
- Add internal/runtime with RuntimeFactory pattern (GoBGP tenant, FRR fabric stub)
- Add internal/model for internal BGP types and internal/hash for change detection
- Update deployment manifests, Dockerfile, containerlab config, and docs
- Switch health probes to gRPC on port 5000; remove HTTP health and webhook ports
- GoBGP starts lazily on first BGPRouter reconcile (listenPort=-1, outbound-only)
- Hash-based no-op suppression prevents redundant GoBGP Apply calls

- Replace galactic-agent with galactic-router container image
- Replace BGPInstance/BGPPeer CRDs with BGPRouter/BGPPeer/BGPAdvertisement
- Replace infra cluster with dfw cluster (three-region: dfw, iad, sjc)
- Replace infra route reflector with iad-worker-rr node
- Remove cosmos operator deployment from containerlab
- Update NAD configs to use galacticRouter instead of gobgp
- Add BGP CRD patches to fix ASN maximum for kubebuilder v0.18.0
- Update all documentation, Taskfile, and scripts accordingly

Replaces the ErrEVPNNotImplemented stub with a real implementation that
builds and advertises EVPN Type 5 IP Prefix routes for each SRv6
endpoint prefix in a BGPAdvertisement. The route distinguisher is
derived from the BGPRouter's routerID (Type 1 IP-address:0), the
MpReachNLRI next-hop is the node's primary IPv6 address, and route
target communities are parsed from the advertisement's communities
field. Withdrawal is also supported via b.DeletePath.

Also adds a configurable BGP_LISTEN_PORT environment variable to
galactic-router so the tenant GoBGP instance can bind on port 1790
(port 179 is occupied by the FRR underlay on each worker node).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Replace BGP unnumbered (link-local) underlay peering with numbered
IPv6 /64 subnets between workers and transit routers. Add
BGP_LOCAL_ADDRESS env var to the galactic-router overlay DaemonSet
so GoBGP pins the TCP source address to the node SRv6 loopback.

Underlay: configure numbered IPv6 links and route-maps to set source
address on FRR BGP advertisements (SRv6 SID/forwarding prefixes).

GoBGP runtime: accept localAddress in NewRuntimeFactory, propagate
to peerFromDesired, set Transport.LocalAddress on every peer.

Docs: update containerlab README to reflect numbered links.

…write

- Refresh AGENTS.md with accurate env vars, task commands, and entry points
- Add architecture revision section with corrected repo layout, entry points,
  config tables, module reference, external deps, testing, CI/CD, and Claude
  guidance sections
- Add markdown table alignment convention
- Update CLAUDE.md to match