[ci skip] tune resource limits and requests across 10 services

Critical OOM fixes (add/increase limits):
- netbox: add 512Mi limit (was at 98.8% of Kyverno default 256Mi)
- speedtest: add 512Mi limit (was at 80.9%)
- meshcentral: add 384Mi limit (was at 72.7%)
- ytdlp: uncomment resources, set 512Mi limit (was at 74.6%)

Over-provisioned (reduce limits):
- dashy: 2Gi → 512Mi (was using 135Mi)
- redis master: 2Gi → 256Mi (was using 14Mi)
- redis replica: 1Gi → 256Mi (was using 12Mi)
- resume printer: 2Gi → 512Mi (was using 108Mi)
- resume app: 1Gi → 384Mi (was using 125Mi)
- openclaw: 4Gi → 1Gi (was using 372Mi)

Under-provisioned requests (increase):
- authentik server: 256Mi → 512Mi request (actual ~560Mi)
- authentik worker: 256Mi → 384Mi request (actual ~400Mi)

New explicit resources (previously Kyverno defaults):
- forgejo: add 512Mi limit, 64Mi request

stacks/platform/modules/authentik/values.yaml

@@ -20,7 +20,7 @@ server:
   resources:
     requests:
       cpu: 100m
-      memory: 256Mi
+      memory: 512Mi
     limits:
       cpu: "2"
       memory: 1Gi
@@ -39,7 +39,7 @@ worker:
   resources:
     requests:
       cpu: 50m
-      memory: 256Mi
+      memory: 384Mi
     limits:
       cpu: "1"
       memory: 1Gi

stacks/platform/modules/redis/main.tf

@@ -40,10 +40,10 @@ resource "helm_release" "redis" {
     }
 
     sentinel = {
-      enabled          = true
-      quorum           = 2
-      masterSet        = "mymaster"
-      automateCluster  = true
+      enabled         = true
+      quorum          = 2
+      masterSet       = "mymaster"
+      automateCluster = true
 
       resources = {
         requests = {
@@ -66,12 +66,12 @@ resource "helm_release" "redis" {
 
       resources = {
         requests = {
-          cpu    = "200m"
-          memory = "512Mi"
+          cpu    = "100m"
+          memory = "64Mi"
         }
         limits = {
-          cpu    = "1"
-          memory = "2Gi"
+          cpu    = "500m"
+          memory = "256Mi"
         }
       }
     }
@@ -87,12 +87,12 @@ resource "helm_release" "redis" {
 
       resources = {
         requests = {
-          cpu    = "100m"
-          memory = "256Mi"
+          cpu    = "50m"
+          memory = "64Mi"
         }
         limits = {
           cpu    = "500m"
-          memory = "1Gi"
+          memory = "256Mi"
         }
       }
     }