scale down non-critical services to free cluster memory

- authentik server: 3→2, worker: 3→2, PDB minAvailable: 2→1
- tuya-bridge: 3→1
- realestate-crawler-api: 2→1
- claude-memory: 2→1
- grafana: 2→1 (config only, apply pending)
- alertmanager: 2→1 (config only, apply pending)

Estimated savings: ~1.2 Gi total

stacks/authentik/modules/authentik/values.yaml

@@ -16,7 +16,7 @@ authentik:
     host: ${redis_host}
 
 server:
-  replicas: 3
+  replicas: 2
   strategy:
     type: RollingUpdate
     rollingUpdate:
@@ -44,12 +44,12 @@ server:
     diun.include_tags: "^202[0-9].[0-9]+.*$" # no need to annotate the worker as it uses the same image
   pdb:
     enabled: true
-    minAvailable: 2
+    minAvailable: 1
 global:
   addPrometheusAnnotations: true
 
 worker:
-  replicas: 3
+  replicas: 2
   strategy:
     type: RollingUpdate
     rollingUpdate:

stacks/claude-memory/main.tf

@@ -142,7 +142,7 @@ resource "kubernetes_deployment" "claude-memory" {
     }
   }
   spec {
-    replicas = 2
+    replicas = 1
     selector {
       match_labels = {
         app = "claude-memory"

stacks/real-estate-crawler/main.tf

@@ -192,7 +192,7 @@ resource "kubernetes_deployment" "realestate-crawler-api" {
     }
   }
   spec {
-    replicas = 2
+    replicas = 1
     strategy {
       type = "RollingUpdate"
       rolling_update {

stacks/tuya-bridge/main.tf

@@ -59,7 +59,7 @@ resource "kubernetes_deployment" "tuya-bridge" {
     }
   }
   spec {
-    replicas = 3
+    replicas = 1
     selector {
       match_labels = {
         app = "tuya-bridge"