feat: La Suite email/messages, buildkitd, monitoring, vault and storage updates

- Add Messages (email) service: backend, frontend, MTA in/out, MPA, SOCKS
  proxy, worker, DKIM config, and theme customization
- Add Collabora deployment for document collaboration
- Add Drive frontend nginx config and values
- Add buildkitd namespace for in-cluster container builds
- Add SeaweedFS remote sync and additional S3 buckets
- Update vault secrets across namespaces (devtools, lasuite, media,
  monitoring, ory, storage) with expanded credential management
- Update monitoring: rename grafana→metrics OAuth2Client, add Prometheus
  remote write and additional scrape configs
- Update local/production overlays with resource patches
- Remove stale login-ui resource patch from production overlay

base/lasuite/kustomization.yaml

@@ -15,7 +15,8 @@ resources:
   - vault-secrets.yaml
   - integration-deployment.yaml
   - people-frontend-nginx-configmap.yaml
-  - docs-frontend-nginx-configmap.yaml
+  - collabora-deployment.yaml
+  - collabora-service.yaml
   - meet-config.yaml
   - meet-backend-deployment.yaml
   - meet-backend-service.yaml
@@ -23,12 +24,29 @@ resources:
   - meet-frontend-nginx-configmap.yaml
   - meet-frontend-deployment.yaml
   - meet-frontend-service.yaml
+  - drive-frontend-nginx-configmap.yaml
+  - messages-config.yaml
+  - messages-backend-deployment.yaml
+  - messages-backend-service.yaml
+  - messages-frontend-theme-configmap.yaml
+  - messages-frontend-deployment.yaml
+  - messages-frontend-service.yaml
+  - messages-worker-deployment.yaml
+  - messages-mta-in-deployment.yaml
+  - messages-mta-in-service.yaml
+  - messages-mta-out-deployment.yaml
+  - messages-mta-out-service.yaml
+  - messages-mpa-dkim-config.yaml
+  - messages-mpa-deployment.yaml
+  - messages-mpa-service.yaml
+  - messages-socks-proxy-deployment.yaml
+  - messages-socks-proxy-service.yaml
 
 patches:
   # Rewrite hardcoded production integration URL + inject theme CSS in people-frontend
   - path: patch-people-frontend-nginx.yaml
-  # Inject theme CSS in docs-frontend
-  - path: patch-docs-frontend-nginx.yaml
+  # Mount media auth proxy nginx config in drive-frontend
+  - path: patch-drive-frontend-nginx.yaml
 
 # La Suite Numérique Helm charts.
 # Charts with a published Helm repo use helmCharts below.
@@ -42,10 +60,10 @@ helmCharts:
     namespace: lasuite
     valuesFile: people-values.yaml
 
-  # helm repo add docs https://suitenumerique.github.io/docs/
-  - name: docs
-    repo: https://suitenumerique.github.io/docs/
-    version: "4.5.0"
-    releaseName: docs
+  # helm repo add drive https://suitenumerique.github.io/drive/
+  - name: drive
+    repo: https://suitenumerique.github.io/drive/
+    version: "0.14.0"
+    releaseName: drive
     namespace: lasuite
-    valuesFile: docs-values.yaml
+    valuesFile: drive-values.yaml