fix(local): kustomize render passes cleanly

- Remove base/mesh from local overlay (Linkerd installed via CLI in local-up.sh)
- Fix LiveKit namespace: chart doesn't set .Release.Namespace, add explicit patches
- Fix release names: livekit-server and cloudnative-pg match chart names (avoid double-prefix)
- Disable hydra-maester (not needed for local dev)
- Add memory limits for cloudnative-pg operator and livekit-server deployments
- Remove non-functional values-ory.yaml patch (DOMAIN_SUFFIX handled by sed in local-up.sh)
- Gitignore **/charts/ (kustomize helm cache, generated artifact)

base/ory/hydra-values.yaml

@@ -2,6 +2,11 @@
 # DOMAIN_SUFFIX is replaced by overlay patches.
 # DSN and system secrets come from the overlay-specific Secret.
 
+# Disable the maester controller — it manages OAuth2Client CRDs which we don't use locally.
+# OAuth2 clients are registered directly via the Hydra admin API.
+maester:
+  enabled: false
+
 hydra:
   config:
     dsn: "postgresql://hydra:$(HYDRA_DB_PASSWORD)@postgres-rw.data.svc.cluster.local:5432/hydra_db"