eu-sovereign-cloud

Add or complete a vertical resource in the ECP control plane — a SECA-spec resource such as image, subnet, sku, public-ip, nic, instance, security-group, route-table, internet-gateway, or region. Covers the full slice: domain types, CRD code generation, conversion, controller, REST handler, the dummy CSP plugin, deployment/RBAC, tests, and docs, strictly following the vendored spec at modules/go-sdk/spec. Use when the user says "add/implement/scaffold/finish/ wire up the <X> vertical/resource/controller/CRD", or invokes the planning command: `/plan new ['read-only'] ('global'|'regional-tenant'|'regional-workspace') resource [<group>] <resource_name> from <resource_spec_path>` — where `read-only` is present iff the spec exposes only list/get, `<group>` is present for regional resources and omitted for global ones, and `<resource_name>` is the resource's spec `name:`.