refactor: migrate from ingress-nginx to Traefik v3

Replace ingress-nginx 4.15.1 with Traefik v3 (Helm chart 39.0.7)
as the ingress controller for the local kind cluster.

- Replace k8s/nginx/ with k8s/traefik/ (Helm chart, values, namespace)
- Update setup script selectors and namespace references
- Convert nginx upstream-vhost annotations to Traefik Middleware CRDs
- Update ingressClassName from nginx to traefik

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
refactor: migrate from ingress-nginx to Traefik v3

Replace ingress-nginx 4.15.1 with Traefik v3 (Helm chart 39.0.7)
as the ingress controller for the local kind cluster.

- Replace k8s/nginx/ with k8s/traefik/ (Helm chart, values, namespace)
- Update setup script selectors and namespace references
- Convert nginx upstream-vhost annotations to Traefik Middleware CRDs
- Update ingressClassName from nginx to traefik
- Add .claude/ to .gitignore

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

k8s/traefik/kustomization.yaml

@@ -0,0 +1,12 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- namespaces.yaml
+helmCharts:
+- name: traefik
+  namespace: traefik
+  includeCRDs: true
+  releaseName: traefik
+  repo: https://traefik.github.io/charts
+  version: 39.0.7
+  valuesFile: values.yaml

k8s/traefik/namespaces.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: traefik

k8s/traefik/values.yaml

@@ -0,0 +1,31 @@
+deployment:
+  kind: DaemonSet
+
+ports:
+  web:
+    hostPort: 80
+  websecure:
+    hostPort: 443
+
+tolerations:
+  - key: "node-role.kubernetes.io/master"
+    operator: "Equal"
+    effect: "NoSchedule"
+  - key: "node-role.kubernetes.io/control-plane"
+    operator: "Equal"
+    effect: "NoSchedule"
+
+nodeSelector:
+  ingress-ready: "true"
+
+providers:
+  kubernetesIngress:
+    publishedService:
+      enabled: false
+
+service:
+  type: ClusterIP
+
+ingressClass:
+  enabled: true
+  isDefaultClass: true