Add compose commands

[sjmiller609]

Summary

• add hypeman compose plan, hypeman compose up, and hypeman compose down
• load a v1 compose manifest for services, env interpolation, resources, restart policy, healthcheck, and ingress
• tag managed instances and ingresses with compose metadata and spec hashes for idempotent reapply
• create instances through a raw payload path so new instance policy fields can be passed before the generated SDK catches up
• document an OTel collector compose example

Testing

• go test ./...
• ./scripts/lint
• ./scripts/build

---

Note

Medium Risk
Introduces new resource-reconciling commands that create/replace/delete instances, ingresses, and images based on hashed specs; mistakes could impact running infrastructure if tags/naming collide or replacement behavior is misunderstood.

Overview
Adds a new hypeman compose command group (plan, up, down) that applies a v1 YAML workload file by rendering desired images/instances/ingresses, diffing against existing resources, and executing create/replace/delete actions.

The implementation tags managed instances/ingresses with compose ownership metadata plus a rendered-spec hash to make re-applies idempotent, block unmanaged name conflicts, and require an explicit --replace for immutable changes; up can optionally wait for instances to reach Running.

Updates documentation to introduce Compose usage and adds an OTel collector example, and bumps the hypeman-go SDK dependency (plus yaml.v3) to support the new params and YAML parsing.

^{Reviewed by Cursor Bugbot for commit 8b77da2. Bugbot is set up for automated code reviews on this repo. Configure here.}

[firetiger-agent]

Firetiger deploy monitoring skipped

This PR didn't match the auto-monitor filter configured on your GitHub connection:

Any PR that changes the kernel API. Monitor changes to API endpoints (packages/api/cmd/api/) and Temporal workflows (packages/api/lib/temporal) in the kernel repo

Reason: PR adds compose commands to the CLI tool, not changes to API endpoints (packages/api/cmd/api/) or Temporal workflows (packages/api/lib/temporal).

To monitor this PR anyway, reply with @firetiger monitor this.

[cursor]

Cursor Bugbot has reviewed your changes and found 2 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 8b77da2. Configure here.}