feat: La Suite email/messages, buildkitd, monitoring, vault and storage updates

- Add Messages (email) service: backend, frontend, MTA in/out, MPA, SOCKS
  proxy, worker, DKIM config, and theme customization
- Add Collabora deployment for document collaboration
- Add Drive frontend nginx config and values
- Add buildkitd namespace for in-cluster container builds
- Add SeaweedFS remote sync and additional S3 buckets
- Update vault secrets across namespaces (devtools, lasuite, media,
  monitoring, ory, storage) with expanded credential management
- Update monitoring: rename grafana→metrics OAuth2Client, add Prometheus
  remote write and additional scrape configs
- Update local/production overlays with resource patches
- Remove stale login-ui resource patch from production overlay

overlays/local/kustomization.yaml

@@ -12,6 +12,7 @@ kind: Kustomization
 # replace DOMAIN_SUFFIX with <LIMA_IP>.sslip.io before kubectl apply.
 
 resources:
+  - ../../base/build
   - ../../base/ingress
   - ../../base/ory
   - ../../base/data
@@ -34,6 +35,7 @@ images:
     newName: src.DOMAIN_SUFFIX/studio/people-backend
   - name: lasuite/people-frontend
     newName: src.DOMAIN_SUFFIX/studio/people-frontend
+    newTag: latest
 
   # amd64-only impress (Docs) images — same mirror pattern.
   - name: lasuite/impress-backend