[ci skip] Fix DNS forwarding through Traefik to Technitium

Expose UDP port 53 on the Traefik LoadBalancer service and enable
cross-namespace CRD references so the IngressRouteUDP in the traefik
namespace can route DNS traffic to technitium-dns in the technitium
namespace. This restores DNS resolution via 10.0.20.202 for pfSense
and Home Assistant.

modules/kubernetes/traefik/main.tf

@@ -51,8 +51,9 @@ resource "helm_release" "traefik" {
         publishedService           = { enabled = true }
       }
       kubernetesCRD = {
-        enabled                   = true
-        allowExternalNameServices = true
+        enabled                    = true
+        allowExternalNameServices  = true
+        allowCrossNamespace        = true
       }
     }
 
@@ -93,6 +94,7 @@ resource "helm_release" "traefik" {
         port        = 5353
         exposedPort = 53
         protocol    = "UDP"
+        expose      = { default = true }
       }
     }