refactor(apps): move forte-drop apps from base to upc-dev overlay

forte-drop, forte-drop-mcp and forte-drop-postgresql lived under apps/base/
but were only ever wired into the upc-dev overlay (never listed in
apps/base/kustomization.yaml). They carry hackathon-domain hardcoded values
and must not sync to upc-prod, so they belong in the overlay alongside
dbunk-demo — per danijel.simeunovic's review on PR #18.

- git mv the three dirs into apps/overlays/upc-dev/ (history preserved)
- rewrite overlay kustomization refs from ../../base/forte-drop* to local
- repoint forte-drop-postgresql Application path
  apps/base/... -> apps/overlays/upc-dev/forte-drop-postgresql/resources

Render-verified: kubectl kustomize apps/overlays/upc-dev differs only by the
postgres path line; apps/overlays/upc-prod render byte-identical (forte-drop
never reaches prod).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

apps/overlays/upc-dev/forte-drop-postgresql/forte-drop-postgresql.yaml

@@ -17,7 +17,7 @@ spec:
   source:
     repoURL: ssh://git@git.forteapps.net:2222/Forte/launchpad.git
     targetRevision: HEAD
-    path: apps/base/forte-drop-postgresql/resources
+    path: apps/overlays/upc-dev/forte-drop-postgresql/resources
 
   destination:
     server: https://kubernetes.default.svc

apps/overlays/upc-dev/kustomization.yaml

@@ -2,12 +2,13 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
 - ../../base
-- ../../base/forte-drop-postgresql
+- forte-drop-postgresql
-- ../../base/forte-drop
+- forte-drop
-- ../../base/forte-drop-mcp
+- forte-drop-mcp
 - dbunk-demo
 
-# No patches needed — base already has "upc-dev" paths
+# No patches needed — base apps already default to "upc-dev" value paths
-# upc-dev is the default/base cluster
+# (upc-dev is the default/base cluster).
-# forte-drop and forte-drop-mcp are scoped to upc-dev only — they have
+# forte-drop (postgres + web + mcp) and dbunk-demo are upc-dev-only apps — they
-# hackathon-domain hardcoded values and must not sync to upc-prod.
+# have hackathon-domain hardcoded values and must not sync to upc-prod, so they
+# live here in the overlay rather than in apps/base/.