refactor: restructure project — separate tools, config, generated, provider

TOOLS/        — generators + scripts + config + ARCHITECTURE.md
  ├── yaml-generator/    (code)
  ├── resource-generator/ (code)
  ├── docs-generator/    (code)
  ├── scripts/           (← devops/*.sh)
  ├── config/            (← devops/profiles/ + devops/config/)
  │   ├── test/          profile.env, services_list.txt, operation_timeouts.json
  │   ├── prod/
  │   └── dev/
  └── ARCHITECTURE.md    (← devops/ARCHITECTURE.md)

generated/    — pipeline output only (gitignored)
  ├── test/resources_yaml/, go/, docs/, provider_build/
  ├── prod/
  └── dev/

provider/     — code only, no generated files
  resources_yaml/        — DELETED (generated)
  internal/resources_gen/ — DELETED (generated)

devops/       — removed (replaced by TOOLS/scripts + TOOLS/config + generated/)

Generators now fail if NUBES_*_DIR not set (no defaults to provider/).
Provider requires pipeline to populate resources_gen/ before build.

TOOLS/yaml-generator/main.go

@@ -34,11 +34,7 @@ func main() {
 
 	outputDir := cfg.OutputDir
 	if outputDir == "" {
-		repoRoot, err := config.FindRepoRoot()
-		if err != nil {
-			panic(err)
-		}
-		outputDir = filepath.Join(repoRoot, "resources_yaml")
+		panic("NUBES_OUTPUT_DIR is required — generated files must go to generated/{stand}/resources_yaml/")
 	}
 	if err := spec.ValidateOutputDir(outputDir); err != nil {
 		panic(err)