feat(unraid-lab): expose Argo CD UI via tailscale ingress

Argo CD is inline-manifest-seeded, not a chart-app, so no values-driven
ingress like radar/hubble get for free. Raw manifest, backend targets
argocd-server:80 (server already runs --insecure per its Service, http
and https ports both hit :8080) -- tailscale terminates TLS at the edge.

Author: syscod3

clusters/unraid-lab/apps/argocd-ingress/application.yaml

@@ -0,0 +1,23 @@
+# unraid-lab-only. Tailscale ingress for the Argo CD UI — Argo CD itself is
+# seeded via Talos inline-manifests, not a chart-app, so it has no
+# values-driven ingress like radar/hubble; this is a plain raw manifest.
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: argocd-ingress
+  namespace: argocd
+spec:
+  project: default
+  source:
+    repoURL: https://github.com/syscode-labs/syscode-homelab-gitops-apps.git
+    targetRevision: HEAD
+    path: clusters/unraid-lab/apps/argocd-ingress/manifests
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: argocd
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true

clusters/unraid-lab/apps/argocd-ingress/manifests/ingress.yaml

@@ -0,0 +1,21 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: argocd-server
+  namespace: argocd
+spec:
+  ingressClassName: tailscale
+  tls:
+    - hosts:
+        - argocd-unraid-lab.wind-bearded.ts.net
+  rules:
+    - host: argocd-unraid-lab.wind-bearded.ts.net
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: argocd-server
+                port:
+                  number: 80

clusters/unraid-lab/apps/argocd-ingress/manifests/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ingress.yaml