feat(media): deploy Element Call fork + optimize LiveKit quality

- Deploy self-hosted Element Call at call.sunbeam.pt with SSO login
- LiveKit: VP9 > AV1 > H.264 codec preferences, Opus stereo
- LiveKit: congestion_control.allow_pause=false, larger NACK buffers
- LiveKit: resources bumped to 2Gi/4CPU for VP9 SVC
- Proxy: add call.* route, TLS cert SAN for call.sunbeam.pt

base/ingress/pingora-config.yaml

@@ -348,6 +348,10 @@ data:
       backend      = "http://openbao.data.svc.cluster.local:8200"
       auth_request = "http://hydra-public.ory.svc.cluster.local:4444/userinfo"
 
+    [[routes]]
+    host_prefix = "call"
+    backend     = "http://element-call.media.svc.cluster.local:80"
+
     # Bare domain (sunbeam.pt) — serves .well-known/matrix delegation only.
     # The proxy splits on '.', so sunbeam.pt yields prefix "sunbeam".
     [[routes]]