Right-size CPU requests cluster-wide and remove missed CPU limits

Increase requests for under-requested pods (dashy 50m→250m, frigate 500m→1500m,
clickhouse 100m→500m, otp 100m→300m, linkwarden 25m→50m, authentik worker 50m→100m).

Reduce requests for over-requested pods (crowdsec agent/lapi 500m→25m each,
prometheus 200m→100m, dbaas mysql 1800m→100m, pg-cluster 250m→50m,
shlink-web 250m→10m, gpu-pod-exporter 50m→10m, stirling-pdf 100m→25m,
technitium 100m→25m, celery 50m→15m). Reduce crowdsec quota from 8→1 CPU.

Remove missed CPU limits in prometheus (cpu: "2") and dbaas (cpu: "3600m") tpl files.

stacks/platform/modules/crowdsec/main.tf

@@ -365,7 +365,7 @@ resource "kubernetes_resource_quota" "crowdsec" {
   }
   spec {
     hard = {
-      "requests.cpu"    = "8"
+      "requests.cpu"    = "1"
       "requests.memory" = "8Gi"
       "limits.memory"   = "16Gi"
       pods              = "30"

stacks/platform/modules/crowdsec/values.yaml

@@ -2,6 +2,12 @@
 container_runtime: containerd
 
 agent:
+  resources:
+    requests:
+      cpu: 25m
+      memory: 64Mi
+    limits:
+      memory: 512Mi
   priorityClassName: "tier-1-cluster"
   # To specify each pod you want to process it logs (pods present in the node)
   acquisition:
@@ -44,6 +50,12 @@ agent:
       configMap:
         name: crowdsec-whitelist
 lapi:
+  resources:
+    requests:
+      cpu: 25m
+      memory: 128Mi
+    limits:
+      memory: 1Gi
   priorityClassName: "tier-1-cluster"
   replicas: 3
   topologySpreadConstraints: