pkgatlas(kube): deploy

Flux HelmRelease tracking the CI-published chart (>=0.4.0-0, timestamped
versions, appVersion pinned to the image commit). Ingress host
pkgatlas.vhaudiquet.fr via traefik; TLS terminates at Caddy with the
*.vhaudiquet.fr wildcard, so the new @pkgatlas route proxies to Traefik
like the other public vhosts.

kubernetes/infrastructure/caddy/caddyfile.yaml

@@ -40,6 +40,8 @@ data:
 
         @umami       host umami.vhaudiquet.fr
 
+        @pkgatlas    host pkgatlas.vhaudiquet.fr
+
         handle @authentik {
             reverse_proxy traefik.traefik.svc.cluster.local.:80
         }
@@ -70,6 +72,9 @@ data:
         handle @umami {
             reverse_proxy traefik.traefik.svc.cluster.local.:80
         }
+        handle @pkgatlas {
+            reverse_proxy traefik.traefik.svc.cluster.local.:80
+        }
 
         # Docker VM services (via Docker Traefik)
         @alexscript     host alexscript.vhaudiquet.fr