feat(vault): deploy HashiCorp Vault 2.0.1 via Helm chart 0.32.0

HA raft cluster (5 replicas) with disable_mlock=true, IPC_LOCK capability,
headless-DNS retry_join, kubernetes service_registration, 10Gi cephrbd-fast-delete
PVC. Gateway API HTTPRoute on 443→8200. ArgoCD platform ApplicationSet entry added.

apps/base/vault/kustomization.yaml

@@ -4,18 +4,5 @@ kind: Kustomization
 
 resources:
   - namespace.yaml
-  - serviceaccount.yaml
-  - role.yaml
-  - rolebinding.yaml
-  - statefulset.yaml
-  - service.yaml
-  - service_headless.yaml
   - gateway.yaml
   - httproute.yaml
-
-configMapGenerator:
-  - name: vault-config
-    files:
-      - resources/vault.hcl
-    options:
-      disableNameSuffixHash: true