feat(openclaw,infra): optimize token usage with GLM-5.3-Flash and add Garmin MCP integration

- Migrate OpenClaw primary model to z-ai/glm-5.3-flash across conductor, heartbeat, subagents, and vision
- Configure deepseek-v4.1-flash and qwen3.8-flash as fallback models; retire claude-3.7-sonnet and deepseek-v4-pro
- Decouple heartbeat target to prevent active session context amplification and token bleed
- Add Garmin Connect MCP integration, secret unpacking, and Elite Strength Coach SOUL protocol
- Add ADR 0001 documenting hybrid tool search and subagent architecture
- Update Authentik configuration, theme styles, and Terraform state
- Add Grafana dashboard for Taupi fan monitoring and update Velero secrets
- Bump knowledge-wiki submodule pointer

k8s/auth/authentik.secret.values.yaml

@@ -14,6 +14,8 @@ global:
         secretKeyRef:
           name: authentik-db-app
           key: password
+    - name: AUTHENTIK_SESSION__DURATION
+      value: "days=30"
 
 authentik:
   # Secret key for cookie signing and session encryption
@@ -27,9 +29,9 @@ server:
   resources:
     requests:
       cpu: 100m
-      memory: 384Mi
+      memory: 512Mi
     limits:
-      memory: 768Mi
+      memory: 1536Mi
 
   ingress:
     enabled: true