remove: strip all oauth2-proxy deployments

- Delete oauth2-proxy helm releases from helmfile (temporal, kmsvc, longhorn, portainer)
- Remove oauth2-proxy manifests and ingress redirects
- Add direct ingress for kmsvc management service
- Update temporal/portainer/longhorn ingress comments to reflect direct service exposure

Services now accessible without oauth2-proxy layer.

k8s/ingress/ingress.yaml

@@ -272,7 +272,7 @@ spec:
 
 ---
 # ── Temporal Web UI ────────────────────────────────────────────────────────────
-# Temporal workflow orchestration Web UI with OIDC authentication
+# Temporal workflow orchestration Web UI
 # TLS: wildcard cert managed by cert-manager, served by nginx default-ssl-certificate
 apiVersion: networking.k8s.io/v1
 kind: Ingress
@@ -295,3 +295,25 @@ spec:
                 name: temporal-web
                 port:
                   number: 8080
+
+---
+# ── kmsvc (SQS/Kafka REST API) ────────────────────────────────────────────
+# SQS-compatible messaging API via kmsvc management service
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: kmsvc
+  namespace: sqs
+spec:
+  ingressClassName: nginx
+  rules:
+    - host: kmsvc.riotpiao.homelab.com
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: management-service
+                port:
+                  number: 8080