apps: fc-chat refactor + fc-menuboard app split

- fc-chat.yaml: TLS/IngressRoute only (Deployment managed by deploy script, matches fc-signage/fc-mysql/fc-kiosk pattern)
- fc-menuboard: new app bundle

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

apps/fc-chat/fc-chat.yaml

@@ -1,73 +1,5 @@
-# FlowerCore Chat — AI chat service
+# FlowerCore Chat — TLS + Ingress
----
+# Deployment and Service managed by deploy script (not ArgoCD)
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: fc-chat
-  labels:
-    app.kubernetes.io/part-of: bluejay-infra
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: chat-web
-  namespace: fc-chat
-  labels:
-    app: chat-web
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: chat-web
-  template:
-    metadata:
-      labels:
-        app: chat-web
-    spec:
-      containers:
-        - name: chat-web
-          image: localhost/fc-chat-web:v202604132015
-          imagePullPolicy: Never
-          ports:
-            - containerPort: 8080
-              name: http
-          env:
-            - name: ASPNETCORE_ENVIRONMENT
-              value: Production
-            - name: ASPNETCORE_URLS
-              value: "http://+:8080"
-          resources:
-            requests:
-              memory: "128Mi"
-              cpu: "100m"
-            limits:
-              memory: "512Mi"
-              cpu: "500m"
-          livenessProbe:
-            httpGet:
-              path: /metrics/prometheus
-              port: 8080
-            initialDelaySeconds: 10
-            periodSeconds: 30
-          readinessProbe:
-            httpGet:
-              path: /metrics/prometheus
-              port: 8080
-            initialDelaySeconds: 5
-            periodSeconds: 10
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: chat-web
-  namespace: fc-chat
-spec:
-  selector:
-    app: chat-web
-  ports:
-    - port: 80
-      targetPort: 8080
-      name: http
 ---
 apiVersion: cert-manager.io/v1
 kind: Certificate

apps/fc-menuboard/fc-menuboard.yaml

@@ -0,0 +1,32 @@
+# FlowerCore MenuBoard — TLS + Ingress
+# Deployment and Service managed by deploy script (not ArgoCD)
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: menuboard-web-tls
+  namespace: fc-menuboard
+spec:
+  secretName: menuboard-web-tls
+  issuerRef:
+    name: step-ca-acme
+    kind: ClusterIssuer
+  dnsNames:
+    - menuboard.iamworkin.lan
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: menuboard-web
+  namespace: fc-menuboard
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`menuboard.iamworkin.lan`)
+      kind: Rule
+      services:
+        - name: menuboard-web
+          port: 80
+  tls:
+    secretName: menuboard-web-tls