refactor(ci): generate CRD schemas at CI time, not stored in repo

Add generate-schemas step to kubeconform woodpecker pipeline so schemas
are built from live kustomize output on each PR run. Remove the committed
ci/crd-schemas/ snapshot and gitignore the directory so it stays local-only.

.woodpecker/kubeconform.yaml

@@ -2,6 +2,21 @@ when:
   - event: pull_request
 
 steps:
+  - name: generate-schemas
+    image: git.unkin.net/unkin/almalinux9-kubetest:20260319
+    commands:
+      - make generate-schemas
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
+
   - name: kubeconform
     image: git.unkin.net/unkin/almalinux9-kubetest:20260319
     commands: