[ci skip] fix cluster health: GPU tolerations, actualbudget nfs_server, AuthentikDown alert

- Add missing nvidia.com/gpu toleration to ollama and yt-highlights deployments
- Add node_selector gpu=true to ollama deployment
- Pass nfs_server variable through to actualbudget factory modules
- Fix AuthentikDown alert to match actual deployment name (goauthentik-server)

stacks/ytdlp/main.tf

@@ -189,6 +189,11 @@ resource "kubernetes_deployment" "yt_highlights" {
         node_selector = {
           "gpu" : "true"
         }
+        toleration {
+          key      = "nvidia.com/gpu"
+          value    = "true"
+          effect   = "NoSchedule"
+        }
         container {
           name              = "yt-highlights"
           image             = "viktorbarzin/yt-highlights:v20-20260127"