feat(apps): restructure apps deployment, add Penpot HelmRelease, and refactor CDN ingress

flux/apps/ingress-halo-static.yaml

@@ -4,8 +4,8 @@ metadata:
   name: halo-static
   namespace: apps
   annotations:
-    nginx.ingress.kubernetes.io/use-regex: "true"
     nginx.ingress.kubernetes.io/proxy-buffering: "on"
+    nginx.ingress.kubernetes.io/use-regex: "true"
     nginx.ingress.kubernetes.io/configuration-snippet: |
       proxy_cache cache;
       proxy_cache_valid 200 302 7d;
@@ -17,9 +17,6 @@ metadata:
       add_header X-Cache-Status $upstream_cache_status;
 spec:
   ingressClassName: nginx
-  tls:
-    - hosts:
-        - dev.cm
   rules:
     - host: dev.cm
       http:
@@ -31,3 +28,6 @@ spec:
                 name: halo
                 port:
                   number: 80
+  tls:
+    - hosts:
+        - dev.cm