Добавить ручной изолированный QA-стенд через CI

Beads: trasser-isolated-stand-prep. Depends on !64 (merged). Manual protected web-only ISOLATED_QA_DEPLOY=true job, shared trasser-project-stand resource group. Dedicated internal Compose network/DB/volumes, capped resources, no public ports or diagnostic changes. Validates current commit/pipeline/JAR and runtime JAR; generates local 0600 DB secret; persistent active reservation prevents silent retries/parallel retained stands. Health-only evidence, never product acceptance; no auto cleanup. Prerequisite: administrator provisions /srv/trasser/isolated-qa for runner. Six synthetic Python tests PASS; docs1131 PASS; GitLab CI lint valid, no warnings. Docker deployment NOT run, runtime unverified. Self-review only. Target parent branch isolates diff: do not merge into parent; retarget main after dependencies and rerun CI. No authorization to merge this new MR or deploy implied.