feat: adopt ghost-en into GitOps with non-www → www redirect

Brings the existing manually-applied ghost-en (theexclusionzone.com)
into the GitOps repo. Adds redirect-to-www-https middleware to fix the
Google Search Console redirect issue: non-www now 301s to https://www
instead of serving duplicate content.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

ghost-en/ingressroutes.yaml

@@ -0,0 +1,52 @@
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: ghost-en-https
+  namespace: ghost-en
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - kind: Rule
+      match: Host(`www.theexclusionzone.com`)
+      services:
+        - name: ghost-en
+          port: 2368
+    - kind: Rule
+      match: Host(`theexclusionzone.com`)
+      middlewares:
+        - name: redirect-to-www-https
+          namespace: ghost-en
+      services:
+        - name: ghost-en
+          port: 2368
+  tls:
+    secretName: ghost-en-tls
+
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: ghost-en-http-redirect
+  namespace: ghost-en
+spec:
+  entryPoints:
+    - web
+  routes:
+    - kind: Rule
+      match: Host(`www.theexclusionzone.com`)
+      middlewares:
+        - name: redirect-to-https
+          namespace: ghost-en
+      services:
+        - name: ghost-en
+          port: 2368
+    - kind: Rule
+      match: Host(`theexclusionzone.com`)
+      middlewares:
+        - name: redirect-to-www-https
+          namespace: ghost-en
+      services:
+        - name: ghost-en
+          port: 2368