reduce CPU requests across observability, authentik, bind, woodpecker (#248)

Reduce reserved-but-unused CPU requests across several workloads (limits unchanged).

| Workload | CPU request |
|---|---|
| vmstorage (vmcluster) | 1 → 250m |
| vmagent | 500m → 250m |
| authentik server | 250m → 50m |
| authentik worker | 250m → 100m |
| bind authoritative | 100m → 20m |
| bind externaldns | 100m → 20m |
| bind resolvers | 100m → 20m |
| woodpecker agent | 100m → 50m |

Reviewed-on: #248
Co-authored-by: Ben Vincent <ben@unkin.net>
Co-committed-by: Ben Vincent <ben@unkin.net>

apps/base/bind-internal/authoritative/cluster.yaml

@@ -31,7 +31,7 @@ spec:
       external-dns.alpha.kubernetes.io/hostname: bind-authoritative-primary.k8s.syd1.au.unkin.net
   resources:
     requests:
-      cpu: 100m
+      cpu: 20m
       memory: 128Mi
     limits:
       cpu: "1"

apps/base/bind-internal/externaldns/cluster.yaml

@@ -23,7 +23,7 @@ spec:
     type: ClusterIP
   resources:
     requests:
-      cpu: 100m
+      cpu: 20m
       memory: 128Mi
     limits:
       cpu: "1"

apps/base/bind-internal/resolvers/cluster.yaml

@@ -23,7 +23,7 @@ spec:
     - 1.1.1.1
   resources:
     requests:
-      cpu: 100m
+      cpu: 20m
       memory: 128Mi
     limits:
       cpu: "1"

apps/base/observability/vmagent.yaml

@@ -16,7 +16,7 @@ spec:
     - url: http://vminsert-main.observability.svc.cluster.local:8480/insert/0/prometheus/
   resources:
     requests:
-      cpu: 500m
+      cpu: 250m
       memory: 512Mi
     limits:
       cpu: "1"

apps/base/observability/vmcluster.yaml

@@ -23,7 +23,7 @@ spec:
               storage: 200Gi
     resources:
       requests:
-        cpu: "1"
+        cpu: 250m
         memory: 2Gi
       limits:
         cpu: "2"