fix: remove broken auth annotations from obsidian ingress

Bearer auth-url was misconfigured (pointed to token endpoint, not
forward-auth). No Authentik outpost deployed yet. Remove for now,
vault.riotpiao.com accessible directly. TODO: add forward-auth
once outpost is set up.

k8s/app/obsidian.yaml

@@ -155,8 +155,9 @@ metadata:
   namespace: poimen
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-prod
-    nginx.ingress.kubernetes.io/auth-type: bearer
-    nginx.ingress.kubernetes.io/auth-url: http://authentik-server.iam.svc.cluster.local/application/o/oauth2/token/
+    # TODO: Add Authentik forward-auth once outpost is deployed
+    # nginx.ingress.kubernetes.io/auth-url: https://<outpost>/outpost.goauthentik.io/auth/nginx
+    # nginx.ingress.kubernetes.io/auth-signin: https://authentik.riotpiao.com/outpost.goauthentik.io/start?rd=$scheme://$host$request_uri
 spec:
   ingressClassName: nginx
   tls: