chore(argocd): sync Application manifests with live cluster state

- Update the 5 Applications that still pointed at the internal Gitea URL
  (gitea.gitea.svc.cluster.local) to https://git.chemavx.xyz, matching the
  live patch that made the Gitea->ArgoCD webhook effective for them.
- Add the 9 Applications that existed only in the cluster (filebrowser,
  ghost-en, k8s-manifests, ollama, renovate, researchowl, trilium, umami,
  zona-exclusion) so a cluster rebuild can restore all 14 from git.

Files are verbatim dumps of the live spec. Note: the old
application-polymarket-bot.yaml and application-n8n.yaml in git carried
telegram notification annotations and prune:true that were NOT live; this
snapshot replaces them with what actually runs.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

argocd/application-filebrowser.yaml

@@ -0,0 +1,22 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: filebrowser
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/tracking-id: filebrowser:argoproj.io/Application:argocd/filebrowser
+spec:
+  destination:
+    namespace: filebrowser
+    server: https://kubernetes.default.svc
+  project: default
+  source:
+    path: filebrowser
+    repoURL: https://git.chemavx.xyz/chemavx/k8s-manifests
+    targetRevision: HEAD
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+    - CreateNamespace=true

argocd/application-ghost-en.yaml

@@ -0,0 +1,30 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: ghost-en
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/tracking-id: ghost-en:argoproj.io/Application:argocd/ghost-en
+spec:
+  destination:
+    namespace: ghost-en
+    server: https://kubernetes.default.svc
+  ignoreDifferences:
+  - group: ''
+    jsonPointers:
+    - /data
+    kind: Secret
+    name: ghost-en-smtp
+    namespace: ghost-en
+  project: default
+  source:
+    path: ghost-en
+    repoURL: https://git.chemavx.xyz/chemavx/k8s-manifests
+    targetRevision: HEAD
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+    - CreateNamespace=true
+    - RespectIgnoreDifferences=true

argocd/application-k8s-manifests.yaml

@@ -0,0 +1,22 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: k8s-manifests
+  namespace: argocd
+  finalizers:
+  - resources-finalizer.argocd.argoproj.io
+spec:
+  destination:
+    namespace: default
+    server: https://kubernetes.default.svc
+  project: default
+  source:
+    path: .
+    repoURL: https://git.chemavx.xyz/chemavx/k8s-manifests
+    targetRevision: main
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+    - CreateNamespace=true

argocd/application-n8n.yaml

@@ -3,22 +3,24 @@ kind: Application
 metadata:
   name: n8n
   namespace: argocd
-  annotations:
-    notifications.argoproj.io/subscribe.on-sync-succeeded.telegram: "5138407666"
-    notifications.argoproj.io/subscribe.on-sync-failed.telegram: "5138407666"
-    notifications.argoproj.io/subscribe.on-degraded.telegram: "5138407666"
 spec:
+  destination:
+    namespace: n8n
+    server: https://kubernetes.default.svc
+  ignoreDifferences:
+  - jsonPointers:
+    - /data
+    kind: Secret
+    name: n8n-secret
+    namespace: n8n
   project: default
   source:
-    repoURL: http://gitea.gitea.svc.cluster.local:3000/chemavx/k8s-manifests.git
-    targetRevision: main
     path: n8n
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: n8n
+    repoURL: https://git.chemavx.xyz/chemavx/k8s-manifests
+    targetRevision: main
   syncPolicy:
     automated:
-      prune: true
       selfHeal: true
     syncOptions:
     - CreateNamespace=true
+    - RespectIgnoreDifferences=true

argocd/application-ollama.yaml

@@ -0,0 +1,19 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: ollama
+  namespace: argocd
+spec:
+  destination:
+    namespace: ollama
+    server: https://kubernetes.default.svc
+  project: default
+  source:
+    path: ollama
+    repoURL: https://git.chemavx.xyz/chemavx/k8s-manifests
+    targetRevision: HEAD
+  syncPolicy:
+    automated:
+      selfHeal: true
+    syncOptions:
+    - CreateNamespace=true

argocd/application-openclaw.yaml

@@ -4,14 +4,14 @@ metadata:
   name: openclaw
   namespace: argocd
 spec:
+  destination:
+    namespace: openclaw
+    server: https://kubernetes.default.svc
   project: default
   source:
-    repoURL: http://gitea.gitea.svc.cluster.local:3000/chemavx/k8s-manifests.git
-    targetRevision: main
     path: openclaw
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: openclaw
+    repoURL: https://git.chemavx.xyz/chemavx/k8s-manifests
+    targetRevision: main
   syncPolicy:
     automated:
       prune: true

argocd/application-polymarket-bot.yaml

@@ -3,22 +3,15 @@ kind: Application
 metadata:
   name: polymarket-bot
   namespace: argocd
-  annotations:
-    notifications.argoproj.io/subscribe.on-sync-succeeded.telegram: "5138407666"
-    notifications.argoproj.io/subscribe.on-sync-failed.telegram: "5138407666"
-    notifications.argoproj.io/subscribe.on-degraded.telegram: "5138407666"
 spec:
+  destination:
+    namespace: polymarket-bot
+    server: https://kubernetes.default.svc
   project: default
   source:
-    repoURL: http://gitea.gitea.svc.cluster.local:3000/chemavx/k8s-manifests.git
-    targetRevision: main
     path: polymarket-bot
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: polymarket-bot
+    repoURL: https://git.chemavx.xyz/chemavx/k8s-manifests
+    targetRevision: main
   syncPolicy:
     automated:
-      prune: true
       selfHeal: true
-    syncOptions:
-      - CreateNamespace=true

argocd/application-portfolio.yaml

@@ -4,14 +4,14 @@ metadata:
   name: portfolio
   namespace: argocd
 spec:
+  destination:
+    namespace: portfolio
+    server: https://kubernetes.default.svc
   project: default
   source:
-    repoURL: http://gitea.gitea.svc.cluster.local:3000/chemavx/k8s-manifests.git
-    targetRevision: main
     path: portfolio
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: portfolio
+    repoURL: https://git.chemavx.xyz/chemavx/k8s-manifests
+    targetRevision: main
   syncPolicy:
     automated:
       prune: true

argocd/application-registry-cache.yaml

@@ -4,14 +4,14 @@ metadata:
   name: registry-cache
   namespace: argocd
 spec:
+  destination:
+    namespace: registry-cache
+    server: https://kubernetes.default.svc
   project: default
   source:
-    repoURL: http://gitea.gitea.svc.cluster.local:3000/chemavx/k8s-manifests.git
-    targetRevision: main
     path: registry-cache
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: registry-cache
+    repoURL: https://git.chemavx.xyz/chemavx/k8s-manifests
+    targetRevision: main
   syncPolicy:
     automated:
       prune: true

argocd/application-renovate.yaml

@@ -0,0 +1,28 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: renovate
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/tracking-id: renovate:argoproj.io/Application:argocd/renovate
+spec:
+  destination:
+    namespace: renovate
+    server: https://kubernetes.default.svc
+  ignoreDifferences:
+  - group: ''
+    jsonPointers:
+    - /data
+    kind: Secret
+    name: renovate-token
+  project: default
+  source:
+    path: renovate
+    repoURL: https://git.chemavx.xyz/chemavx/k8s-manifests
+    targetRevision: HEAD
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+    - CreateNamespace=true

argocd/application-researchowl.yaml

@@ -0,0 +1,22 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: researchowl
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/tracking-id: researchowl:argoproj.io/Application:argocd/researchowl
+spec:
+  destination:
+    namespace: researchowl
+    server: https://kubernetes.default.svc
+  project: default
+  source:
+    path: researchowl
+    repoURL: https://git.chemavx.xyz/chemavx/k8s-manifests
+    targetRevision: HEAD
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+    - CreateNamespace=true

argocd/application-trilium.yaml

@@ -0,0 +1,22 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: trilium
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/tracking-id: trilium:argoproj.io/Application:argocd/trilium
+spec:
+  destination:
+    namespace: trilium
+    server: https://kubernetes.default.svc
+  project: default
+  source:
+    path: trilium
+    repoURL: https://git.chemavx.xyz/chemavx/k8s-manifests
+    targetRevision: HEAD
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+    - CreateNamespace=true

argocd/application-umami.yaml

@@ -0,0 +1,30 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: umami
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/tracking-id: umami:argoproj.io/Application:argocd/umami
+spec:
+  destination:
+    namespace: umami
+    server: https://kubernetes.default.svc
+  ignoreDifferences:
+  - group: ''
+    jsonPointers:
+    - /data
+    kind: Secret
+    name: umami-secrets
+    namespace: umami
+  project: default
+  source:
+    path: umami
+    repoURL: https://git.chemavx.xyz/chemavx/k8s-manifests
+    targetRevision: HEAD
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+    - CreateNamespace=true
+    - RespectIgnoreDifferences=true

argocd/application-zona-exclusion.yaml

@@ -0,0 +1,30 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: zona-exclusion
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/tracking-id: zona-exclusion:argoproj.io/Application:argocd/zona-exclusion
+spec:
+  destination:
+    namespace: zona-exclusion
+    server: https://kubernetes.default.svc
+  ignoreDifferences:
+  - group: ''
+    jsonPointers:
+    - /data
+    kind: Secret
+    name: zona-exclusion-secrets
+    namespace: zona-exclusion
+  project: default
+  source:
+    path: zona-exclusion
+    repoURL: https://git.chemavx.xyz/chemavx/k8s-manifests
+    targetRevision: HEAD
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+    - CreateNamespace=true
+    - RespectIgnoreDifferences=true