feat(infra-net): add CDN Ingress and related services, restructure kustomization

flux/README.md

@@ -21,6 +21,7 @@ flux/
 │   ├── infra-devops/                    # cert-manager, webhook-dnspod, reflector, velero
 │   ├── infra-data/                      # CNPG operator, Barman, PG集群, Valkey
 │   ├── infra-net/                       # ingress-nginx, CrowdSec, Tailscale DERP, 证书
+│   │   └── post/                        # CDN Ingress（依赖 apps，打破循环）
 │   ├── infra-monitor/                   # Loki, Prometheus+Grafana
 │   │   └── post/                        # Promtail（依赖 infra-net，打破循环）
 │   └── infra-gitops/                    # Gitea
@@ -36,6 +37,7 @@ sources → secrets → kube-system → infra-devops → infra-data → infra-da
        → infra-monitor-post (Promtail)
        → infra-gitops
        → apps
+       → infra-net-post (CDN Ingress)
        → infra-gitops-post (suspend=true，需手工凭据)
 ```