[ci skip] add resource limits to paperless-ngx and stirling-pdf to prevent OOMKills

Both services were hitting the 256Mi Kyverno LimitRange default and getting
OOMKilled. Set explicit limits to 1Gi memory for both.

stacks/paperless-ngx/main.tf

@@ -110,6 +110,17 @@ resource "kubernetes_deployment" "paperless-ngx" {
             mount_path = "/usr/src/paperless/data"
           }
 
+          resources {
+            requests = {
+              cpu    = "100m"
+              memory = "256Mi"
+            }
+            limits = {
+              cpu    = "2"
+              memory = "1Gi"
+            }
+          }
+
           port {
             container_port = 8000
           }

stacks/stirling-pdf/main.tf

@@ -44,6 +44,17 @@ resource "kubernetes_deployment" "stirling-pdf" {
         container {
           image = "stirlingtools/stirling-pdf:latest"
           name  = "stirling-pdf"
+          resources {
+            requests = {
+              cpu    = "100m"
+              memory = "256Mi"
+            }
+            limits = {
+              cpu    = "2"
+              memory = "1Gi"
+            }
+          }
+
           port {
             container_port = 8080
           }