stage/prod: bootstrap apps only, prod ksops keys

Bootstrap: cert-manager kargo kargo-infra-pipeline kargo-ci-pipeline kargo-test-env-pipeline kargo-credentials
Other apps arrive via Kargo promotion (dev → test → PR → prod)

infra/traefik-routes/manifests/kargo-ingress.yaml

@@ -1,21 +0,0 @@
-# Kargo dashboard HTTPS IngressRoute
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: kargo-https
-  namespace: kargo
-spec:
-  entryPoints:
-    - websecure
-  routes:
-    - match: HostRegexp(`kargo.k3s\..+\.local`)
-      kind: Rule
-      middlewares:
-        - name: kargo-tls-middleware
-          namespace: kargo
-      services:
-        - name: kargo-api
-          port: 443
-          scheme: https
-          serversTransport: kargo-skip-verify
-  tls: {}