cluster health fixes: NFS CSI, Immich ML, dbaas, Redis, DNS, trading-bot removal

- NFS CSI: fix liveness-probe port conflict (29652 → 29653)
- Immich ML: add gpu-workload priority class to enable preemption on node1
- dbaas: right-size MySQL memory limits (sidecar 6Gi→350Mi, main 4Gi→3Gi)
- Redis: add redis-master service via HAProxy for master-only routing,
  update config.tfvars redis_host to use it
- CoreDNS: forward .viktorbarzin.lan to Technitium ClusterIP (10.96.0.53)
  instead of stale LoadBalancer IP (10.0.20.200)
- Trading bot: comment out all resources (no longer needed)
- Vault: remove trading-bot PostgreSQL database role

stacks/trading-bot/main.tf

@@ -1,3 +1,8 @@
+/*
+# TRADING-BOT STACK COMMENTED OUT - 2026-04-06
+# Deployments scaled to 0, infrastructure disabled to prevent re-creation on apply
+# To re-enable: uncomment this entire block
+
 variable "tls_secret_name" {
   type      = string
   sensitive = true
@@ -620,3 +625,4 @@ module "ingress" {
     "gethomepage.dev/pod-selector" = ""
   }
 }
+*/