k8s/aux: add cert-manager longhorn dashboard forge dev-tools and shadowsocks

- cert-manager ClusterIssuers (LetsEncrypt + homelab-ca)
- Longhorn storage dashboard
- Portainer dashboard config
- Forgejo git service
- Claude terminal remote access
- Shadowsocks tunnel for remote access

k8s/dashboard/portainer-ingress-oauth2.yaml

@@ -0,0 +1,25 @@
+# Ingress for Portainer container UI — routes to OAuth2-Proxy
+# TLS terminated here; oauth2-proxy handles OIDC auth
+
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: portainer
+  namespace: dashboard
+spec:
+  ingressClassName: nginx
+  tls:
+  - secretName: portainer-tls
+    hosts:
+    - portainer.riotpiao.homelab.com
+  rules:
+  - host: portainer.riotpiao.homelab.com
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: oauth2-proxy-portainer
+            port:
+              number: 4180