fix(dns,k8s): add moritzgraf.de apex A record, modernize ingress, and resolve cluster alerts

- terraform: add ovh_domain_zone_record.moritzgraf_domain pointing to cluster IP
- k8s/web: modernize Ingress to networking.k8s.io/v1 with traefik class and auto-renew TLS certificate
- k8s/backup: set activeDeadlineSeconds and backoffLimit: 3 on gdrive-to-gphotos, clean dead pods
- k8s/openclaw: set failedJobsHistoryLimit: 1 on wiki backup cronjob and purge stale failed job
- k8s/coder: increase postgresql CPU limit to 500m to eliminate CFS CPU throttling

terraform/terraform.tfstate

@@ -1,7 +1,7 @@
 {
   "version": 4,
   "terraform_version": "1.14.3",
-  "serial": 403,
+  "serial": 405,
   "lineage": "8aff5d23-05f6-10eb-0ae6-1084c787677e",
   "outputs": {
     "coder_oauth_client_secret": {
@@ -4242,6 +4242,28 @@
         }
       ]
     },
+    {
+      "mode": "managed",
+      "type": "ovh_domain_zone_record",
+      "name": "moritzgraf_domain",
+      "provider": "provider[\"registry.terraform.io/ovh/ovh\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "fieldtype": "A",
+            "id": "5436150587",
+            "subdomain": "",
+            "target": "136.243.23.215",
+            "ttl": 60,
+            "zone": "moritzgraf.de"
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0,
+          "private": "bnVsbA=="
+        }
+      ]
+    },
     {
       "mode": "managed",
       "type": "ovh_domain_zone_record",