Remove all CPU limits cluster-wide to eliminate CFS throttling

CPU limits cause CFS throttling even when nodes have idle capacity.
Move to a request-only CPU model: keep CPU requests for scheduling
fairness but remove all CPU limits. Memory limits stay (incompressible).

Changes across 108 files:
- Kyverno LimitRange policy: remove cpu from default/max in all 6 tiers
- Kyverno ResourceQuota policy: remove limits.cpu from all 5 tiers
- Custom ResourceQuotas: remove limits.cpu from 8 namespace quotas
- Custom LimitRanges: remove cpu from default/max (nextcloud, onlyoffice)
- RBAC module: remove cpu_limits variable and quota reference
- Freedify factory: remove cpu_limit variable and limits reference
- 86 deployment files: remove cpu from all limits blocks
- 6 Helm values files: remove cpu under limits sections

stacks/platform/modules/monitoring/alloy.yaml

@@ -204,5 +204,4 @@ controller:
       cpu: 50m
       memory: 512Mi
     limits:
-      cpu: 200m
       memory: 1Gi

stacks/platform/modules/monitoring/caretta.tf

@@ -32,7 +32,6 @@ resource "helm_release" "caretta" {
         memory = "300Mi"
       }
       limits = {
-        cpu    = "200m"
         memory = "512Mi"
       }
     }

stacks/platform/modules/monitoring/goflow2.tf

@@ -43,7 +43,6 @@ resource "kubernetes_deployment" "goflow2" {
               memory = "64Mi"
             }
             limits = {
-              cpu    = "200m"
               memory = "256Mi"
             }
           }

stacks/platform/modules/monitoring/grafana_chart_values.yaml

@@ -7,7 +7,6 @@ resources:
     cpu: 50m
     memory: 128Mi
   limits:
-    cpu: 500m
     memory: 512Mi
 topologySpreadConstraints:
   - maxSkew: 1

stacks/platform/modules/monitoring/loki.yaml

@@ -72,7 +72,6 @@ singleBinary:
       cpu: 250m
       memory: 2Gi
     limits:
-      cpu: "1"
       memory: 4Gi
 
 # Zero out replica counts of other deployment modes

stacks/platform/modules/monitoring/main.tf

@@ -7,28 +7,28 @@ variable "idrac_username" {
   default = "root"
 }
 variable "idrac_password" {
-  default = "calvin"
+  default   = "calvin"
   sensitive = true
 }
 variable "alertmanager_slack_api_url" {}
 variable "tiny_tuya_service_secret" {
-  type = string
+  type      = string
   sensitive = true
 }
 variable "haos_api_token" {
-  type = string
+  type      = string
   sensitive = true
 }
 variable "pve_password" {
-  type = string
+  type      = string
   sensitive = true
 }
 variable "grafana_db_password" {
-  type = string
+  type      = string
   sensitive = true
 }
 variable "grafana_admin_password" {
-  type = string
+  type      = string
   sensitive = true
 }
 variable "tier" { type = string }
@@ -211,7 +211,6 @@ resource "kubernetes_resource_quota" "monitoring" {
     hard = {
       "requests.cpu"    = "16"
       "requests.memory" = "16Gi"
-      "limits.cpu"      = "64"
       "limits.memory"   = "64Gi"
       pods              = "100"
     }