ci: re-apply instagram-poster + payslip-ingest stacks after pipeline race

Comment-only touch of both stacks so the changed-stack detection applies
them from the current master tree. Two pipelines went wrong in sequence
during the parallel ADR-0002 wave-2 migrations (issues #23/#24):

- pipeline 146 (instagram-poster stack prep, commit 29c69250) was
  auto-killed when the concurrent payslip-ingest push superseded it, so
  its apply never ran;
- restarting it as pipeline 148 inherited CI_PREV_COMMIT_SHA = the NEW
  branch head (6928ce0b) with the OLD checkout (29c69250) — a reverse
  diff that re-applied stacks/payslip-ingest from the pre-migration
  tree, stripping the ghcr image base + ghcr-credentials pull secrets
  that pipeline 147 had just applied (2 resources reverted).

This commit restores the committed payslip-ingest config exactly as
issue #24 landed it and finally applies the instagram-poster ghcr prep
from issue #23. Lesson encoded in the comments: do not restart killed
infra pipelines after master has moved — re-trigger with a touch commit
instead.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

stacks/instagram-poster/modules/instagram-poster/main.tf

@@ -4,6 +4,8 @@ locals {
   # pushes ghcr.io/viktorbarzin/instagram-poster (private — pulls need the
   # ghcr-credentials Secret cloned in by the kyverno sync-ghcr-credentials
   # ClusterPolicy). Replaces the forgejo.viktorbarzin.me/viktor base.
+  # (Applied via the 2026-06-13 re-trigger commit: the original pipeline 146
+  # was auto-killed by a concurrent master push before its apply step ran.)
   image = "ghcr.io/viktorbarzin/instagram-poster:${var.image_tag}"
   labels = {
     app = "instagram-poster"

stacks/payslip-ingest/main.tf

@@ -14,6 +14,9 @@ locals {
   # ghcr.io/viktorbarzin/payslip-ingest. The running Deployment tag is set via
   # `kubectl set image` by the Woodpecker deploy pipeline (image is
   # KEEL_IGNORE_IMAGE below); the CronJob tracks :latest with pull policy Always.
+  # (Re-applied 2026-06-13: infra pipeline 148 — a restart of the auto-killed
+  # 146 — diffed in reverse and re-applied this stack from a pre-migration
+  # tree, stripping the ghcr config above. This touch re-asserts it.)
   image = "ghcr.io/viktorbarzin/payslip-ingest:${var.image_tag}"
   labels = {
     app = "payslip-ingest"