## Summary
- Remove the 600Mi memory limit on the local Postgres Deployment. With `shared_buffers=384MB` + `max_connections=300` the pod was being repeatedly OOMKilled under real workloads, leaving clients with intermittent `connect: connection refused`. Keep the 400Mi request for scheduling.
- Add `document` to the seeded database list in `initdb.sh`.
## Test plan
- [x] `kubectl --context kind-unbound apply -f k8s/infra/postgres.yaml` — rollout succeeds
- [x] Postgres pod stable (0 restarts) after apply
- [ ] On a fresh cluster (`./setup`), verify the `document` database is created (requires empty `data/postgres/`)
Reviewed-on: #259
Add TLS configuration for staging-shiny and staging-shiny-api
hosts in the ingress resources. Create a new namespace for
ingress-nginx to better organize resources. Update kustomization
files to include new certificates and secrets. Streamline setup
process with improved wait commands for pod readiness.