refactor: rename fragments directory to ingredients and update all references

- Directory rename: fragments/ → ingredients/ (54 .ks files)
- Updated all Python scripts:
  * tests/integration/conftest.py - fixture renames
  * tests/integration/test_integration.py - constant and path updates
  * tests/test_recipe_generator.py - updated test assertions
  * recipe-generator/validators.py - updated comments and error messages
  * recipe-generator/recipe_generator.py - updated comment
- Updated all YAML files:
  * recipe-generator/recipe_templates.yaml - 66 path references
  * .gitea/workflows/validate-fragments.yaml → validate-ingredients.yaml
  * .gitea/workflows/test-generation.yaml - path patterns
- Updated scripts:
  * bin/ksflatten-relative - updated path detection
- Updated test file:
  * tests/integration/test_fragments.py → test_ingredients.py
- Updated documentation:
  * DEVELOPMENT.md - simplified references
  * DEVELOPMENT_QUICK.md - updated examples
  * tests/container/README.md - test references
- Regenerated all recipes (16 files) with ingredient paths
- Updated test fixtures (7 files)
- All integration tests pass (5/5)
- All unit tests pass (29/31 - 2 pre-existing failures unrelated)

ingredients/core/base.ks

@@ -0,0 +1,5 @@
+# Core base kickstart configuration
+# Common settings for all Phyllome OS installations
+
+text # Kickstart installation in text mode
+poweroff # Shut down the system after a successful installation

ingredients/core/locale.ks

@@ -0,0 +1,5 @@
+# Keyboard, language, and timezone configuration
+
+keyboard --xlayouts='ch (fr)' # Set keyboard layouts for Romandy
+lang en_US.UTF-8 # Set system language to American English. More languages could be supported: --addsupport=cs_CZ,de_DE,en_UK
+timezone Europe/Zurich --utc # Set system timezone to Zurich

ingredients/core/network.ks

@@ -0,0 +1,3 @@
+# Network configuration
+
+network  --onboot=yes --bootproto=dhcp --device=link --activate --hostname=phyllome-alpha # Configure network devices, enable them at boot time device and sets a particular hostname. "link" selects the first device reaching an up state

ingredients/core/security/disabled.ks

@@ -0,0 +1,5 @@
+# Security configuration - disabled mode
+
+rootpw --plaintext 1234 --allow-ssh # Root account is enabled with weak password and allow ssh
+selinux --disabled # Disable SELinux
+firewall --enabled --ssh # Reject incoming connections that are not in response to outbound requests except SSH

ingredients/core/security/enabled.ks

@@ -0,0 +1,5 @@
+# Security configuration - enabled mode
+
+rootpw --lock # No root login from the console
+selinux --enforcing # Set SELinux to enforcing mode
+firewall --enabled # Enable firewall

ingredients/core/services.ks

@@ -0,0 +1,3 @@
+# System services
+
+services --enabled=NetworkManager,systemd-resolved # List of comma-separated systemd services that can be explicitly enabled