Remove all CPU limits cluster-wide to eliminate CFS throttling

CPU limits cause CFS throttling even when nodes have idle capacity.
Move to a request-only CPU model: keep CPU requests for scheduling
fairness but remove all CPU limits. Memory limits stay (incompressible).

Changes across 108 files:
- Kyverno LimitRange policy: remove cpu from default/max in all 6 tiers
- Kyverno ResourceQuota policy: remove limits.cpu from all 5 tiers
- Custom ResourceQuotas: remove limits.cpu from 8 namespace quotas
- Custom LimitRanges: remove cpu from default/max (nextcloud, onlyoffice)
- RBAC module: remove cpu_limits variable and quota reference
- Freedify factory: remove cpu_limit variable and limits reference
- 86 deployment files: remove cpu from all limits blocks
- 6 Helm values files: remove cpu under limits sections

stacks/platform/modules/crowdsec/main.tf

@@ -4,12 +4,12 @@ variable "homepage_password" {}
 variable "db_password" {}
 variable "enroll_key" {}
 variable "crowdsec_dash_api_key" {
-  type = string
+  type      = string
   sensitive = true
 }
-variable "crowdsec_dash_machine_id" { type = string }       # used for web dash
+variable "crowdsec_dash_machine_id" { type = string } # used for web dash
 variable "crowdsec_dash_machine_password" {
-  type = string
+  type      = string
   sensitive = true
 }
 variable "tier" { type = string }
@@ -171,7 +171,6 @@ resource "kubernetes_deployment" "crowdsec-web" {
               memory = "32Mi"
             }
             limits = {
-              cpu    = "250m"
               memory = "256Mi"
             }
           }
@@ -368,7 +367,6 @@ resource "kubernetes_resource_quota" "crowdsec" {
     hard = {
       "requests.cpu"    = "8"
       "requests.memory" = "8Gi"
-      "limits.cpu"      = "16"
       "limits.memory"   = "16Gi"
       pods              = "30"
     }