feat: La Suite email/messages, buildkitd, monitoring, vault and storage updates

- Add Messages (email) service: backend, frontend, MTA in/out, MPA, SOCKS
  proxy, worker, DKIM config, and theme customization
- Add Collabora deployment for document collaboration
- Add Drive frontend nginx config and values
- Add buildkitd namespace for in-cluster container builds
- Add SeaweedFS remote sync and additional S3 buckets
- Update vault secrets across namespaces (devtools, lasuite, media,
  monitoring, ory, storage) with expanded credential management
- Update monitoring: rename grafana→metrics OAuth2Client, add Prometheus
  remote write and additional scrape configs
- Update local/production overlays with resource patches
- Remove stale login-ui resource patch from production overlay

base/lasuite/docs-frontend-nginx-configmap.yaml

@@ -1,7 +1,4 @@
-# nginx config for docs-frontend that injects the brand theme CSS at serve time.
-# sub_filter injects the theme.css link before </head> so Cunningham CSS variables
-# are overridden at runtime without rebuilding the app.
-# gzip must be off for sub_filter to work on HTML responses.
+# nginx config for docs-frontend.
 apiVersion: v1
 kind: ConfigMap
 metadata:
@@ -17,9 +14,9 @@ data:
       root /app;
 
       gzip off;
-      sub_filter '</head>' '<link rel="preconnect" href="https://fonts.googleapis.com"><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin><link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Ysabeau+Variable:ital,wght@0,100..900;1,100..900&display=swap"><link rel="stylesheet" href="https://integration.DOMAIN_SUFFIX/api/v2/theme.css"></head>';
       sub_filter_once off;
-      sub_filter_types text/html;
+      sub_filter_types text/html application/javascript;
+      sub_filter '</head>' '<link rel="stylesheet" href="https://integration.DOMAIN_SUFFIX/api/v2/theme.css"></head>';
 
       location / {
           try_files $uri index.html $uri/index.html =404;