Fix CI integration test failures

- Add proxy-body-size annotation to allow unlimited uploads via nginx
- Add requires_direct_s3 marker for tests needing direct MinIO access
- Exclude requires_direct_s3 tests from CI (can't access MinIO from outside K8s)
- Add auto-migration for tag ref_count triggers to ensure they exist

.gitlab-ci.yml

@@ -52,13 +52,15 @@ kics:
     - pip install --index-url "$PIP_INDEX_URL" pytest pytest-asyncio httpx
   script:
     - cd backend
-    # Run full integration test suite, excluding large/slow tests
+    # Run full integration test suite, excluding:
+    # - large/slow tests
+    # - requires_direct_s3 tests (can't access MinIO from outside K8s cluster)
     # ORCHARD_TEST_URL tells the tests which server to connect to
     # Note: Auth tests work because dev/stage deployments have relaxed rate limits
     - |
       python -m pytest tests/integration/ -v \
         --junitxml=integration-report.xml \
-        -m "not large and not slow" \
+        -m "not large and not slow and not requires_direct_s3" \
         --tb=short
   artifacts:
     when: always