stage/prod: bootstrap apps only, prod ksops keys

Bootstrap: cert-manager kargo kargo-infra-pipeline kargo-ci-pipeline kargo-test-env-pipeline kargo-credentials
Other apps arrive via Kargo promotion (dev → test → PR → prod)

infra/argo-rollouts/config.yaml

@@ -1,13 +0,0 @@
-{
-  "name": "argo-rollouts",
-  "namespace": "argo-rollouts",
-  "step": "2",
-  "source": {
-    "repoURL": "https://argoproj.github.io/argo-helm",
-    "chart": "argo-rollouts",
-    "targetRevision": 2.40.6
-  },
-  "helm": {
-    "values": "dashboard:\n  enabled: true\n"
-  }
-}