[ci skip] fix cluster health: GPU tolerations, actualbudget nfs_server, AuthentikDown alert

- Add missing nvidia.com/gpu toleration to ollama and yt-highlights deployments
- Add node_selector gpu=true to ollama deployment
- Pass nfs_server variable through to actualbudget factory modules
- Fix AuthentikDown alert to match actual deployment name (goauthentik-server)

stacks/ollama/main.tf

@@ -89,6 +89,14 @@ resource "kubernetes_deployment" "ollama" {
         }
       }
       spec {
+        node_selector = {
+          "gpu" = "true"
+        }
+        toleration {
+          key      = "nvidia.com/gpu"
+          value    = "true"
+          effect   = "NoSchedule"
+        }
         container {
           image = "ollama/ollama:latest"
           name  = "ollama"