feat(infra): Meet integration, La Suite theming, Pingora SSH + meet routes

Meet: add backend/frontend/celery deployments and services, meet-config
ConfigMap, nginx SPA config, VSO secrets (meet-db-credentials VDS,
meet-django-secret and meet-livekit VSS). Wire oidc-meet OAuth2Client.

La Suite overlay discipline: move people/docs frontend nginx ConfigMaps
and patches from overlays/local to base so both environments share them.
Remove values-ory.yaml (folded into base). Add docs-frontend nginx config
with sub_filter theming. Add local gitea mkcert CA patch.

Pingora: add [ssh] TCP passthrough block (port 22 → Gitea SSH pod) and
split meet route into frontend default + backend paths for /api/, /admin/,
/oidc/, /static/, /__. Remove now-unused values-pingora.yaml from production
overlay (host ports moved to patch-pingora-hostport.yaml).

Update both overlay kustomizations to reference all new resources and
add meet-backend/meet-frontend image entries.

base/lasuite/kustomization.yaml

@@ -14,6 +14,21 @@ resources:
   - oidc-clients.yaml
   - vault-secrets.yaml
   - integration-deployment.yaml
+  - people-frontend-nginx-configmap.yaml
+  - docs-frontend-nginx-configmap.yaml
+  - meet-config.yaml
+  - meet-backend-deployment.yaml
+  - meet-backend-service.yaml
+  - meet-celery-worker-deployment.yaml
+  - meet-frontend-nginx-configmap.yaml
+  - meet-frontend-deployment.yaml
+  - meet-frontend-service.yaml
+
+patches:
+  # Rewrite hardcoded production integration URL + inject theme CSS in people-frontend
+  - path: patch-people-frontend-nginx.yaml
+  # Inject theme CSS in docs-frontend
+  - path: patch-docs-frontend-nginx.yaml
 
 # La Suite Numérique Helm charts.
 # Charts with a published Helm repo use helmCharts below.