Add VictoriaMetrics observability stack + sync catalog for monitoring test

- VM stack 10 charts: victoria-metrics-cluster/auth, victoria-logs-cluster,
  victoria-metrics-agent/alert, opentelemetry-collector, kube-state-metrics,
  prometheus-node-exporter, alertmanager, perses (JWT/OIDC, Infisical-ready)
- ArgoCD ApplicationSet (syncWave) + per-chart dip-values overlays
- doc/victoria-metrics-architecture.md, define-chart-resources updates
- includes pending working-tree changes (mlflow, kubeflow, apisix, CLAUDE.md)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

manifests/helm/mlflow/1.9.0/custom-values.yaml

@@ -43,7 +43,7 @@ artifactRoot:
 
 extraEnvVars:
   # --- 기본 설정 ---
-  MLFLOW_S3_ENDPOINT_URL: "http://minio.minio.svc.cluster.local:9000"
+  MLFLOW_S3_ENDPOINT_URL: "http://rustfs-svc.rustfs.svc.cluster.local:9000"
   MLFLOW_S3_IGNORE_TLS: "true"
   SSL_CERT_FILE: "/etc/ssl/certs/custom-ca.crt"
 
@@ -91,12 +91,17 @@ service:
 
 ingress:
   enabled: true
-  className: "kong"
+  className: "apisix"
   annotations:
-    cert-manager.io/cluster-issuer: "selfsigned-issuer"
+    # root-ca-issuer 사용: selfsigned-issuer 는 subject 가 빈 자체서명 인증서를 발급하여
+    # APISIX ingress controller 가 SSL 오브젝트로 동기화하지 않는다(TLS handshake 실패).
+    # 클러스터의 다른 ingress 와 동일하게 CA 서명 issuer 를 사용한다.
+    cert-manager.io/cluster-issuer: "root-ca-issuer"
     cert-manager.io/duration: 8760h
     cert-manager.io/renew-before: 720h
-    konghq.com/plugins: mlflow-cors
+    # APISIX: http→https redirect 를 ApisixPluginConfig 로 처리 (files/mlflow-apisix-redirect.yaml)
+    # CORS 는 mlflow 앱 네이티브(extraArgs.corsAllowedOrigins)로 처리
+    k8s.apisix.apache.org/plugin-config-name: https-redirect
   hosts:
     - host: mlflow.example.org
       paths: