fix(ory): re-enable hydra-maester, fix namespace, add memory limit

base/ory/hydra-values.yaml

@@ -2,11 +2,6 @@
 # DOMAIN_SUFFIX is replaced by overlay patches.
 # DSN and system secrets come from the overlay-specific Secret.
 
-# Disable the maester controller — it manages OAuth2Client CRDs which we don't use locally.
-# OAuth2 clients are registered directly via the Hydra admin API.
-maester:
-  enabled: false
-
 hydra:
   config:
     dsn: "postgresql://hydra:$(HYDRA_DB_PASSWORD)@postgres-rw.data.svc.cluster.local:5432/hydra_db"