gitops/cilium: move gateway listeners from helm values to Gateway resource

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

gitops/home-kubernetes/cilium/gateway.yaml

@@ -6,15 +6,21 @@ metadata:
   namespace: kube-system
 spec:
   gatewayClassName: cilium
-  listeners:
-    - name: http
-      protocol: HTTP
-      port: 80
-    - name: https
-      protocol: HTTPS
-      port: 443
-      tls:
-        mode: Terminate
-        certificateRefs:
-          - kind: Secret
-            name: gateway-tls
+    listeners:
+      - name: http
+        port: 80
+        protocol: HTTP
+        allowedRoutes:
+          namespaces:
+            from: All
+      - name: https
+        port: 443
+        protocol: HTTPS
+        allowedRoutes:
+          namespaces:
+            from: All
+        tls:
+          mode: Terminate
+          certificateRefs:
+            - kind: Secret
+              name: gateway-tls

gitops/home-kubernetes/cilium/helmrelelase_cilium.yaml

@@ -33,20 +33,6 @@ spec:
       enabled: true
     gatewayAPI:
       enabled: true
-      gateway:
-        listeners:
-          - name: http
-            port: 80
-            protocol: HTTP
-            allowedRoutes:
-              namespaces:
-                from: All
-          - name: https
-            port: 443
-            protocol: HTTPS
-            allowedRoutes:
-              namespaces:
-                from: All
     kubeProxyReplacement: true
     k8sServiceHost: 192.168.0.31  # or LB IP
     k8sServicePort: 6443