feat(infra): Meet integration, La Suite theming, Pingora SSH + meet routes

Meet: add backend/frontend/celery deployments and services, meet-config
ConfigMap, nginx SPA config, VSO secrets (meet-db-credentials VDS,
meet-django-secret and meet-livekit VSS). Wire oidc-meet OAuth2Client.

La Suite overlay discipline: move people/docs frontend nginx ConfigMaps
and patches from overlays/local to base so both environments share them.
Remove values-ory.yaml (folded into base). Add docs-frontend nginx config
with sub_filter theming. Add local gitea mkcert CA patch.

Pingora: add [ssh] TCP passthrough block (port 22 → Gitea SSH pod) and
split meet route into frontend default + backend paths for /api/, /admin/,
/oidc/, /static/, /__. Remove now-unused values-pingora.yaml from production
overlay (host ports moved to patch-pingora-hostport.yaml).

Update both overlay kustomizations to reference all new resources and
add meet-backend/meet-frontend image entries.

base/lasuite/docs-values.yaml

@@ -120,6 +120,7 @@ backend:
         name: docs-django-secret
         key: DJANGO_SECRET_KEY
     DJANGO_CONFIGURATION:             Production
+    FRONTEND_THEME:                   estudio
     ALLOWED_HOSTS:                    docs.DOMAIN_SUFFIX
     DJANGO_ALLOWED_HOSTS:             docs.DOMAIN_SUFFIX
     DJANGO_CSRF_TRUSTED_ORIGINS:      https://docs.DOMAIN_SUFFIX
@@ -148,7 +149,7 @@ backend:
       header:
         logo: {}
         icon:
-          src: "/assets/icon-docs.svg"
+          src: "https://integration.DOMAIN_SUFFIX/logos/docs.svg?v=2"
           style:
             width: "32px"
             height: "auto"