feat: La Suite email/messages, buildkitd, monitoring, vault and storage updates

- Add Messages (email) service: backend, frontend, MTA in/out, MPA, SOCKS
  proxy, worker, DKIM config, and theme customization
- Add Collabora deployment for document collaboration
- Add Drive frontend nginx config and values
- Add buildkitd namespace for in-cluster container builds
- Add SeaweedFS remote sync and additional S3 buckets
- Update vault secrets across namespaces (devtools, lasuite, media,
  monitoring, ory, storage) with expanded credential management
- Update monitoring: rename grafana→metrics OAuth2Client, add Prometheus
  remote write and additional scrape configs
- Update local/production overlays with resource patches
- Remove stale login-ui resource patch from production overlay

overlays/production/patch-mta-in-hostport.yaml

@@ -0,0 +1,15 @@
+# Bind MTA-in port 25 to the host so inbound email reaches the pod directly.
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: messages-mta-in
+  namespace: lasuite
+spec:
+  template:
+    spec:
+      containers:
+        - name: messages-mta-in
+          ports:
+            - containerPort: 25
+              hostPort: 25
+              protocol: TCP

overlays/production/postgres-scheduled-backup.yaml

@@ -4,8 +4,8 @@ metadata:
   name: postgres-daily
   namespace: data
 spec:
-  # Daily at 02:00 UTC
-  schedule: "0 2 * * *"
+  # Daily at 02:00 UTC (CNPG uses 6-field cron: second minute hour dom month dow)
+  schedule: "0 0 2 * * *"
   backupOwnerReference: self
   cluster:
     name: postgres

overlays/production/values-resources.yaml

@@ -149,24 +149,6 @@ spec:
             limits:
               memory: 128Mi
 
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: login-ui
-  namespace: ory
-spec:
-  template:
-    spec:
-      containers:
-        - name: login-ui
-          resources:
-            requests:
-              memory: 128Mi
-              cpu: 50m
-            limits:
-              memory: 384Mi
-
 ---
 apiVersion: apps/v1
 kind: Deployment
@@ -215,79 +197,17 @@ spec:
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: docs-celery-worker
+  name: collabora
   namespace: lasuite
 spec:
-  replicas: 2
   template:
     spec:
       containers:
-        - name: docs
-          env:
-            - name: CELERY_WORKER_CONCURRENCY
-              value: "4"
+        - name: collabora
           resources:
             requests:
               memory: 512Mi
-              cpu: 250m
-            limits:
-              memory: 1Gi
-
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: docs-backend
-  namespace: lasuite
-spec:
-  replicas: 2
-  template:
-    spec:
-      containers:
-        - name: docs
-          env:
-            - name: WEB_CONCURRENCY
-              value: "4"
-          resources:
-            requests:
-              memory: 512Mi
-              cpu: 250m
-            limits:
-              memory: 1Gi
-
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: docs-frontend
-  namespace: lasuite
-spec:
-  replicas: 2
-  template:
-    spec:
-      containers:
-        - name: docs
-          resources:
-            requests:
-              memory: 64Mi
-            limits:
-              memory: 256Mi
-
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: docs-y-provider
-  namespace: lasuite
-spec:
-  replicas: 1
-  template:
-    spec:
-      containers:
-        - name: docs
-          resources:
-            requests:
-              memory: 256Mi
               cpu: 100m
             limits:
               memory: 1Gi
+              cpu: 1000m