e73bd38d02
The forteapp chart now supports tls.additionalDomains (multi-SAN) and ingress.priority (forte-helm#10), so the per-slug wildcard cert and the low-priority HostRegexp IngressRoute no longer need to be standalone overlay resources. Routing + cert move to the forte-drop release values (helm-prod-values). The issuer dnsZones change stays here. Depends on forte-helm#10 (ingress.priority) merged + synced before the values flip, else the consolidated HostRegexp would outrank and steal mcp.drop.forteapps.net. Refs #22 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>