fix(cluster): restore Authentik HelmRelease to kustomization

The blueprint refactor (0709b05) replaced the resources list with only
a configMapGenerator, dropping the helmrelease.yaml reference. This
caused Flux to garbage-collect the Authentik HelmRelease, taking down
the server, worker, Redis, and PostgreSQL pods.

Author: agentydragon

cluster/k8s/authentik/kustomization.yaml

@@ -1,5 +1,10 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
+resources:
+  - helmrelease.yaml
+  - authentik-host-configmap.yaml
+  - token-secret.yaml
+  - httproute.yaml
 configMapGenerator:
   - name: authentik-sso-blueprints
     files: