feat: La Suite email/messages, buildkitd, monitoring, vault and storage updates

- Add Messages (email) service: backend, frontend, MTA in/out, MPA, SOCKS
  proxy, worker, DKIM config, and theme customization
- Add Collabora deployment for document collaboration
- Add Drive frontend nginx config and values
- Add buildkitd namespace for in-cluster container builds
- Add SeaweedFS remote sync and additional S3 buckets
- Update vault secrets across namespaces (devtools, lasuite, media,
  monitoring, ory, storage) with expanded credential management
- Update monitoring: rename grafana→metrics OAuth2Client, add Prometheus
  remote write and additional scrape configs
- Update local/production overlays with resource patches
- Remove stale login-ui resource patch from production overlay

overlays/production/postgres-scheduled-backup.yaml

@@ -4,8 +4,8 @@ metadata:
   name: postgres-daily
   namespace: data
 spec:
-  # Daily at 02:00 UTC
-  schedule: "0 2 * * *"
+  # Daily at 02:00 UTC (CNPG uses 6-field cron: second minute hour dom month dow)
+  schedule: "0 0 2 * * *"
   backupOwnerReference: self
   cluster:
     name: postgres