fix: resolve tandoor, matrix, navidrome crash loops

- Tandoor: pin image to vabene1111/recipes:1.5.27 (latest tag pull
  failing with EOF from pull-through cache corruption)
- Matrix: update homeserver.yaml to use pg-cluster-rw.dbaas instead
  of legacy postgresql.dbaas service, update CNPG postgres password
- Navidrome: deleted corrupted SQLite DB (malformed disk image from
  proxmox-lvm migration), navidrome recreates fresh DB on startup

stacks/matrix/main.tf

@@ -76,7 +76,7 @@ resource "kubernetes_deployment" "matrix" {
           app = "matrix"
         }
         annotations = {
-          "dependency.kyverno.io/wait-for" = "postgresql.dbaas:5432"
+          "dependency.kyverno.io/wait-for" = "pg-cluster-rw.dbaas:5432"
         }
       }
       spec {

stacks/tandoor/main.tf

@@ -118,7 +118,7 @@ resource "kubernetes_deployment" "tandoor" {
       spec {
         container {
           name              = "recipes"
-          image             = "vabene1111/recipes"
+          image             = "vabene1111/recipes:1.5.27"
           image_pull_policy = "IfNotPresent"
           env {
             name  = "SECRET_KEY"