Add JSON schema generation for kubeconform CRD validation

- ci/generate-schemas.sh extracts schemas from live cluster CRDs via kubectl
- Generated schemas committed to schemas/ for CI use
- Run `make schemas` to regenerate after CRD or K8s version changes
- validate-apps.sh and validate-clusters.sh check local schemas first
- Remove all kubeconform skip lists — all resource types now have schemas

schemas/crd.projectcalico.org/ipamconfig_v1.json

@@ -0,0 +1,35 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "properties": {
+    "apiVersion": {
+      "type": "string"
+    },
+    "kind": {
+      "type": "string"
+    },
+    "metadata": {
+      "type": "object"
+    },
+    "spec": {
+      "properties": {
+        "autoAllocateBlocks": {
+          "type": "boolean"
+        },
+        "maxBlocksPerHost": {
+          "maximum": 2147483647,
+          "minimum": 0,
+          "type": "integer"
+        },
+        "strictAffinity": {
+          "type": "boolean"
+        }
+      },
+      "required": [
+        "autoAllocateBlocks",
+        "strictAffinity"
+      ],
+      "type": "object"
+    }
+  },
+  "type": "object"
+}