traefik-controller-decommission

GitOps-flavored SAFE uninstall of the ingress-nginx controller in a Kustomize + ArgoCD repo. Verifies cluster + repo are free of ingressClassName: nginx (precedence-aware: spec wins, legacy annotation falls back). After DNS bake confirmation, plans the decommission as: archive the common.ingress-nginx/ (or equivalent) Kustomize module, disable the ArgoCD Application, wait for ArgoCD prune, then optional LB / IAM…