fix: meet external-api route, drive media proxy, alertbot, misc tweaks

- Meet: add external-api backend path, CSRF trusted origins
- Drive: fix media proxy regex for preview URLs and S3 key signing
- OpenBao: enable Prometheus telemetry
- Postgres alerts: fix metric name (cnpg_backends_total)
- Gitea: bump memory limits for mirror workloads
- Alertbot: expanded deployment config
- Kratos: add find/cal/projects to allowed return URLs, settings path
- Pingora: meet external-api route fix
- Sol: config update

base/lasuite/meet-backend-deployment.yaml

@@ -28,6 +28,8 @@ spec:
                 name: lasuite-s3
             - configMapRef:
                 name: lasuite-oidc-provider
+            - configMapRef:
+                name: lasuite-resource-server
           env:
             - name: DB_PASSWORD
               valueFrom:
@@ -64,6 +66,16 @@ spec:
                 secretKeyRef:
                   name: oidc-meet
                   key: CLIENT_SECRET
+            - name: OIDC_RS_CLIENT_ID
+              valueFrom:
+                secretKeyRef:
+                  name: oidc-meet
+                  key: CLIENT_ID
+            - name: OIDC_RS_CLIENT_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: oidc-meet
+                  key: CLIENT_SECRET
             - name: AWS_S3_ACCESS_KEY_ID
               valueFrom:
                 secretKeyRef:
@@ -102,6 +114,8 @@ spec:
                 name: lasuite-s3
             - configMapRef:
                 name: lasuite-oidc-provider
+            - configMapRef:
+                name: lasuite-resource-server
           env:
             - name: DB_PASSWORD
               valueFrom:
@@ -138,6 +152,16 @@ spec:
                 secretKeyRef:
                   name: oidc-meet
                   key: CLIENT_SECRET
+            - name: OIDC_RS_CLIENT_ID
+              valueFrom:
+                secretKeyRef:
+                  name: oidc-meet
+                  key: CLIENT_ID
+            - name: OIDC_RS_CLIENT_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: oidc-meet
+                  key: CLIENT_SECRET
             - name: AWS_S3_ACCESS_KEY_ID
               valueFrom:
                 secretKeyRef: