Drop git.unkin.net from k8s gitea gateway and routes (#518)

git.unkin.net is served by the VM haproxy during the forge migration. Claiming it on the k8s gitea Gateway/HTTPRoutes competes with that path, so the k8s gitea serves only its admin name until cutover.

- remove git.unkin.net from the gitea HTTPRoute and redirect route hostnames
- remove the http-primary/https-primary listeners and their parentRefs
- set the gateway cert common-name to git.k8s.syd1.au.unkin.net

Reviewed-on: #518
Co-authored-by: unkin-agent <unkin-agent@unkin.net>
Co-committed-by: unkin-agent <unkin-agent@unkin.net>

apps/base/gitea/httproute.yaml

@@ -9,13 +9,8 @@ metadata:
     app.kubernetes.io/instance: gitea
 spec:
   hostnames:
-    - git.unkin.net
     - git.k8s.syd1.au.unkin.net
   parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: gitea
-      sectionName: http-primary
     - group: gateway.networking.k8s.io
       kind: Gateway
       name: gitea
@@ -41,13 +36,8 @@ metadata:
     app.kubernetes.io/instance: gitea
 spec:
   hostnames:
-    - git.unkin.net
     - git.k8s.syd1.au.unkin.net
   parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: gitea
-      sectionName: https-primary
     - group: gateway.networking.k8s.io
       kind: Gateway
       name: gitea