fix: correct Pingora upstream ports and kustomize namespace conflict

pingora-config.yaml: kratos-public and people-backend K8s Services
expose port 80, not 4433/8000. The wrong ports caused Pingora to
return timeouts for /kratos/* and all people.* routes.

ory/kustomization.yaml: remove kustomization-level namespace: ory
transformer. All non-Helm resources already declare namespace: ory
explicitly. The transformer was incorrectly moving hydra-maester's
enabledNamespaces Role (generated for the lasuite namespace) into ory,
producing a duplicate-name conflict during kustomize build.

base/ingress/pingora-config.yaml

@@ -62,7 +62,7 @@ data:
 
     [[routes]]
     host_prefix = "people"
-    backend     = "http://people-backend.lasuite.svc.cluster.local:8000"
+    backend     = "http://people-backend.lasuite.svc.cluster.local:80"
 
     [[routes]]
     host_prefix = "find"
@@ -93,7 +93,7 @@ data:
       # /kratos prefix is stripped before forwarding so Kratos sees its native paths.
       [[routes.paths]]
       prefix        = "/kratos"
-      backend       = "http://kratos-public.ory.svc.cluster.local:4433"
+      backend       = "http://kratos-public.ory.svc.cluster.local:80"
       strip_prefix  = true
 
     [[routes]]

base/ory/kustomization.yaml

@@ -1,7 +1,11 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
-namespace: ory
+# namespace: ory removed — all non-Helm resources already set namespace: ory
+# explicitly, and the Helm charts use namespace: ory in their helmCharts spec.
+# The kustomization-level transformer was incorrectly moving hydra-maester's
+# enabledNamespaces Role (meant for lasuite) into the ory namespace, causing
+# a duplicate-name conflict.
 
 resources:
   - namespace.yaml