fix(local): kustomize render passes cleanly

- Remove base/mesh from local overlay (Linkerd installed via CLI in local-up.sh)
- Fix LiveKit namespace: chart doesn't set .Release.Namespace, add explicit patches
- Fix release names: livekit-server and cloudnative-pg match chart names (avoid double-prefix)
- Disable hydra-maester (not needed for local dev)
- Add memory limits for cloudnative-pg operator and livekit-server deployments
- Remove non-functional values-ory.yaml patch (DOMAIN_SUFFIX handled by sed in local-up.sh)
- Gitignore **/charts/ (kustomize helm cache, generated artifact)

base/media/kustomization.yaml

@@ -7,11 +7,45 @@ resources:
   - namespace.yaml
 
 helmCharts:
-  # chart name is `livekit-server`, not `livekit-helm`
   # helm repo add livekit https://helm.livekit.io
+  # releaseName=livekit-server matches chart name → Helm deduplicates the prefix,
+  # so resources are named `livekit-server` instead of `livekit-livekit-server`.
   - name: livekit-server
     repo: https://helm.livekit.io
     version: "1.9.0"
-    releaseName: livekit
+    releaseName: livekit-server
     namespace: media
     valuesFile: livekit-values.yaml
+
+# The livekit-server chart does not set .Release.Namespace in its templates,
+# so kustomize's namespace field doesn't inject it automatically.
+# Patch namespace onto each chart-rendered resource explicitly.
+patches:
+  - patch: |
+      - op: add
+        path: /metadata/namespace
+        value: media
+    target:
+      kind: Deployment
+      name: livekit-server
+  - patch: |
+      - op: add
+        path: /metadata/namespace
+        value: media
+    target:
+      kind: Service
+      name: livekit-server
+  - patch: |
+      - op: add
+        path: /metadata/namespace
+        value: media
+    target:
+      kind: Service
+      name: livekit-server-turn
+  - patch: |
+      - op: add
+        path: /metadata/namespace
+        value: media
+    target:
+      kind: ConfigMap
+      name: livekit-server