feat(adguard,traefik,cert-manager,reloader): foundation for adguard cert sync

- traefik: enable kubernetesIngress provider (needed for cert-manager HTTP-01)
- adguard: add reloader auto annotation for secret-driven restarts
- cert-manager: namespace, helm values (crds), staging+prod ClusterIssuers
- reloader: namespace manifest

traefik/k8s/traefik-values.yaml

@@ -31,7 +31,7 @@ deployment:
 
 providers:
   kubernetesIngress:
-    enabled: false
+    enabled: true
   kubernetesCRD:
     enabled: true
   kubernetesGateway:
@@ -125,7 +125,7 @@ certificatesResolvers:
   letsencrypt-staging:
     acme:
       email: bobrovod@national.shitposting.agency
-      storage: /data/letsencrypt/acme.json
+      storage: /data/letsencrypt/acme-staging.json
       caServer: https://acme-staging-v02.api.letsencrypt.org/directory
       httpChallenge:
         entryPoint: web