Remove all CPU limits cluster-wide to eliminate CFS throttling

CPU limits cause CFS throttling even when nodes have idle capacity.
Move to a request-only CPU model: keep CPU requests for scheduling
fairness but remove all CPU limits. Memory limits stay (incompressible).

Changes across 108 files:
- Kyverno LimitRange policy: remove cpu from default/max in all 6 tiers
- Kyverno ResourceQuota policy: remove limits.cpu from all 5 tiers
- Custom ResourceQuotas: remove limits.cpu from 8 namespace quotas
- Custom LimitRanges: remove cpu from default/max (nextcloud, onlyoffice)
- RBAC module: remove cpu_limits variable and quota reference
- Freedify factory: remove cpu_limit variable and limits reference
- 86 deployment files: remove cpu from all limits blocks
- 6 Helm values files: remove cpu under limits sections

stacks/platform/modules/authentik/main.tf

@@ -35,7 +35,6 @@ resource "kubernetes_resource_quota" "authentik" {
     hard = {
       "requests.cpu"    = "16"
       "requests.memory" = "16Gi"
-      "limits.cpu"      = "48"
       "limits.memory"   = "96Gi"
       pods              = "50"
     }

stacks/platform/modules/authentik/values.yaml

@@ -22,7 +22,6 @@ server:
       cpu: 100m
       memory: 512Mi
     limits:
-      cpu: "2"
       memory: 1Gi
   topologySpreadConstraints:
     - maxSkew: 1
@@ -51,7 +50,6 @@ worker:
       cpu: 50m
       memory: 384Mi
     limits:
-      cpu: "1"
       memory: 1Gi
   topologySpreadConstraints:
     - maxSkew: 1