Replace nginx Ingress with Gateway + HTTPRoute using the traefik-internal GatewayClass. TLS is terminated at the Gateway listener via cert-manager.
Adds base manifests and au-syd1 overlay for Paperclip (AI agent orchestration platform), following the litellm deployment pattern. Updates aitooling ApplicationSet to include the paperclip path. Closes #99 Reviewed-on: #100