nginx-to-traefik

Class-swap migration that ports services from NGINX Ingress to Traefik Ingress (ingressClassName: traefik) while keeping both controllers running in parallel. DNS A-records are the only cutover lever. Designed for eye-of-horus-gitops conventions: nginx files move to archive/ (never deleted), Traefik Ingresses live in kustomization.resources (never patches), backend Service names and secretName are written verbatim…