feat(reddit-intel): manifiestos preparados, INACTIVOS hasta promoción

App corre en docker compose en n97 (semana de calibración). El app-of-apps
no es recursivo: nada de este directorio se sincroniza hasta aplicar a mano
argocd-app.yaml. Checklist de activación en PROMOTION.md (imagen construida,
secrets en Infisical /reddit-intel, copia de la BD al PVC).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

reddit-intel/infisical-reddit-intel-secrets.yaml

@@ -0,0 +1,26 @@
+apiVersion: secrets.infisical.com/v1beta1
+kind: InfisicalStaticSecret
+metadata:
+  name: reddit-intel-secrets
+  namespace: reddit-intel
+spec:
+  # Shared, read-only machine identity (no write grant, no PushSecret).
+  # Source is the /reddit-intel folder. Expected keys (lowercase-hyphenated,
+  # straight passthrough to the deployment's secretKeyRef values):
+  #   reddit-client-id, reddit-client-secret, llm-api-key,
+  #   dashboard-auth-token, telegram-bot-token, telegram-chat-id
+  # telegram-* pueden crearse vacíos (las notificaciones son opcionales).
+  infisicalAuthRef:
+    name: infisical-auth
+    namespace: infisical-operator
+  sources:
+    - projectId: 17e98e9d-70f5-43d1-8382-7da818dfcdd0   # project "homelab"
+      environmentSlug: prod
+      secretPath: /reddit-intel
+  syncOptions:
+    refreshInterval: 60s
+  targets:
+    - kind: Secret
+      name: reddit-intel-secrets
+      namespace: reddit-intel
+      creationPolicy: Owner