feat(fleet): add park-lab stack (lab bench, dev tier)

Second [[stack]] block: server park-test (the lab box's Periphery
connect_as), compose files from the dev branch, MOVING TAG=dev (a lab
may float; real booths pin), its own park_lab_* secret refs (per-box
blast radius — never shared with a real booth). park-buzi is untouched
on stage + pinned.

Claude-Session: https://claude.ai/code/session_01Xcm6ikLgGoCxxHrxtjkk5V

komodo/resources.toml

@@ -30,6 +30,42 @@
 # new [[stack]] block per site (unique name, its own per-booth secret refs).
 ##############################################################################
 
+##############################################################################
+# park-lab — the LAB bench box (hardware/dev testing, no real traffic). Chases
+# the dev tier: compose files from `dev`, MOVING image tag `dev` (labs may
+# float; real booths pin). Secrets are its own park_lab_* refs — per-box blast
+# radius, never shared with a real booth even in the lab.
+##############################################################################
+
+[[stack]]
+name = "park-lab"
+[stack.config]
+server = "park-test"
+git_provider = "git.infra.msai.al"
+git_account = "komodo"
+repo = "mca/parking_solution"
+branch = "dev"
+file_paths = [
+  "docker-compose.yml",
+  "docker-compose.prod.yml"
+]
+registry_provider = "git.infra.msai.al"
+registry_account = "komodo"
+environment = """
+REGISTRY=git.infra.msai.al/mca/parking_solution
+# Lab tier: the MOVING dev tag — redeploy pulls the latest dev build. Pin to a
+# dev-<sha> only when reproducing a specific state.
+TAG=dev
+COOKIE_SECURE=0
+VISION_ENABLED=1
+WS_ALLOWED_ORIGINS=
+JWT_SECRET=[[park_lab_jwt_secret]]
+EVENT_SIGNING_KEY=[[park_lab_event_signing_key]]
+BACKUP_KEY=[[park_lab_backup_key]]
+"""
+
+##############################################################################
+
 [[stack]]
 name = "park-buzi"
 [stack.config]