Re-add ingress-nginx to TF bootstrap (PodSecurity policy fixed)

- ingress-nginx now has restricted policy level (allows hostPort)
- Previous timeout was due to policy blocking pod deployment
- Re-importing helm release to TF management

terraform/bootstrap-releases.tf

@@ -10,7 +10,11 @@ locals {
       namespace     = "reloader"
       repo          = "stakater"
     }
-    # ingress-nginx: managed separately (not via TF due to helm timeout issues)
+    ingress-nginx = {
+      chart_version = "4.15.1"
+      namespace     = "ingress-nginx"
+      repo          = "ingress_nginx"
+    }
   }
 }