Add K8s deployment manifests for SignalControl, MessageBoard, Chat, TTS Reader

Full deployment manifests (Namespace, Deployment, Service, Certificate,
IngressRoute) for 4 new FlowerCore services with port 8080, ClusterIP
on port 80, cert-manager step-ca-acme TLS, and /metrics/prometheus
health probes.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

apps/fc-signalcontrol/fc-signalcontrol.yaml

@@ -0,0 +1,100 @@
+# FlowerCore SignalControl — Signal sequencing and relay coordination
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: fc-signalcontrol
+  labels:
+    app.kubernetes.io/part-of: bluejay-infra
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: signalcontrol-web
+  namespace: fc-signalcontrol
+  labels:
+    app: signalcontrol-web
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: signalcontrol-web
+  template:
+    metadata:
+      labels:
+        app: signalcontrol-web
+    spec:
+      containers:
+        - name: signalcontrol-web
+          image: localhost/fc-signalcontrol-web:v202604132015
+          imagePullPolicy: Never
+          ports:
+            - containerPort: 8080
+              name: http
+          env:
+            - name: ASPNETCORE_ENVIRONMENT
+              value: Production
+            - name: ASPNETCORE_URLS
+              value: "http://+:8080"
+          resources:
+            requests:
+              memory: "128Mi"
+              cpu: "100m"
+            limits:
+              memory: "512Mi"
+              cpu: "500m"
+          livenessProbe:
+            httpGet:
+              path: /metrics/prometheus
+              port: 8080
+            initialDelaySeconds: 10
+            periodSeconds: 30
+          readinessProbe:
+            httpGet:
+              path: /metrics/prometheus
+              port: 8080
+            initialDelaySeconds: 5
+            periodSeconds: 10
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: signalcontrol-web
+  namespace: fc-signalcontrol
+spec:
+  selector:
+    app: signalcontrol-web
+  ports:
+    - port: 80
+      targetPort: 8080
+      name: http
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: signalcontrol-web-tls
+  namespace: fc-signalcontrol
+spec:
+  secretName: signalcontrol-web-tls
+  issuerRef:
+    name: step-ca-acme
+    kind: ClusterIssuer
+  dnsNames:
+    - signalcontrol.iamworkin.lan
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: signalcontrol-web
+  namespace: fc-signalcontrol
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`signalcontrol.iamworkin.lan`)
+      kind: Rule
+      services:
+        - name: signalcontrol-web
+          port: 80
+  tls:
+    secretName: signalcontrol-web-tls