feat(phase1): remove 9 hookless releases from helmfile — now ArgoCD-managed

Removed releases (all now managed via ArgoCD Applications):
- strimzi-operator
- kafka-cluster
- kmsvc-redis
- queue-crd
- management-service
- promtail
- blackbox-exporter
- portainer
- claude-terminal

Helmfile now contains only hook-heavy releases (phases 2-3) + argocd (self-referential, never migrates).

Next: Verify helmfile diff is clean, then confirm all 9 apps Synced/Healthy in ArgoCD.

helmfile.yaml.gotmpl

@@ -448,14 +448,6 @@ releases:
     needs:
       - storage/minio
 
-  - name: promtail
-    namespace: logging
-    chart: grafana/promtail
-    values:
-      - k8s/logging/promtail-values.yaml
-    needs:
-      - logging/loki
-
   - name: grafana
     namespace: logging
     chart: grafana/grafana
@@ -502,16 +494,6 @@ releases:
             kubectl apply -f k8s/monitoring/alerts/
             kubectl apply -f k8s/longhorn/longhorn-servicemonitor.yaml
 
-  - name: blackbox-exporter
-    namespace: monitoring
-    chart: prometheus-community/prometheus-blackbox-exporter
-    version: "~11"
-    values:
-      - k8s/monitoring/blackbox-exporter-values.yaml
-    needs:
-      - monitoring/prometheus
-      - ingress-nginx/ingress-nginx
-
 # ── CI/CD (Forgejo + runner + Argo CD) ───────────────────────────────────────
 # Required env vars:
 #   FORGEJO_ADMIN_PASSWORD   — bootstrap admin password (set once, stored in .env)
@@ -672,99 +654,8 @@ releases:
 
 # ── Dashboard (Portainer) ─────────────────────────────────────────────────────
 
-  - name: portainer
-    namespace: dashboard
-    createNamespace: true
-    chart: portainer/portainer
-    values:
-      - k8s/portainer/portainer-values.yaml
-    hooks:
-      - events: ["presync"]
-        command: bash
-        args:
-          - -c
-          - |
-            bash k8s/base/namespace-setup.sh dashboard
-
 # ── Messaging Queue (SQS-like Kafka) ─────────────────────────────────────────
 
-  - name: strimzi-operator
-    namespace: sqs
-    createNamespace: true
-    chart: strimzi/strimzi-kafka-operator
-    version: 0.46.0
-    values:
-      - watchNamespaces: ["sqs"]
-
-  - name: kafka-cluster
-    namespace: sqs
-    chart: k8s/sqs/charts/kafka-cluster
-    needs:
-      - sqs/strimzi-operator
-    values:
-      - namespace: sqs
-        nodePool:
-          replicas: 3
-          storage:
-            class: longhorn-kafka
-            sizeGi: 10
-          resources:
-            memory: 5Gi
-            cpu: "2"
-
-  - name: kmsvc-redis
-    namespace: sqs
-    chart: bitnami/redis
-    version: 20.6.0
-    values:
-      - architecture: standalone
-        global:
-          security:
-            allowInsecureImages: true
-        image:
-          repository: bitnamilegacy/redis
-        auth:
-          enabled: false
-        master:
-          persistence:
-            enabled: true
-            storageClass: longhorn
-            size: 2Gi
-          resources:
-            limits:
-              memory: 1Gi
-            requests:
-              memory: 1Gi
-
-  - name: queue-crd
-    namespace: sqs
-    chart: k8s/sqs/charts/queue-crd
-    needs:
-      - sqs/kafka-cluster
-      - sqs/kmsvc-redis
-    values:
-      - namespace: sqs
-        kafkaBrokers: "{{ env "KAFKA_BOOTSTRAP" }}"
-        redisAddr: "{{ env "REDIS_ADDR" }}"
-
-  - name: management-service
-    namespace: sqs
-    chart: k8s/sqs/charts/management-service
-    needs:
-      - sqs/kafka-cluster
-      - sqs/kmsvc-redis
-    values:
-      - namespace: sqs
-        env:
-          kafkaBrokers: "{{ env "KAFKA_BOOTSTRAP" }}"
-          redisAddr: "{{ env "REDIS_ADDR" }}"
-          authentikIssuerURL: "https://authentik.{{ env "CLUSTER_DOMAIN" }}/application/o/kafaka/"
-          authentikAudience: "QI0gPtR99ar8VvhK8Tqox4SDkTKzbNU7lbgwBNSc"
-        ingress:
-          enabled: true
-          host: kmsvc.{{ env "CLUSTER_DOMAIN" }}
-          clusterIssuer: homelab-ca
-
 # ── Story Crater Backend ───────────────────────────────────────────────────────
 # Story Crater Backend — migrated to CloudNativePG in ddb namespace
 # The story_crater database is created by CNPG bootstrap.initdb.postInitApplicationSQL.
@@ -872,13 +763,6 @@ releases:
 
 # ── Claude Terminal (persistent dev environment) ─────────────────────────────
 
-  - name: claude-terminal
-    namespace: dev-tools
-    createNamespace: true
-    chart: ./k8s/dev-tools
-    values:
-      - k8s/dev-tools/values.yaml
-
 # ── Global Reloader Configuration ────────────────────────────────────────────
 
 hooks: