Add VictoriaMetrics observability stack + sync catalog for monitoring test

- VM stack 10 charts: victoria-metrics-cluster/auth, victoria-logs-cluster,
  victoria-metrics-agent/alert, opentelemetry-collector, kube-state-metrics,
  prometheus-node-exporter, alertmanager, perses (JWT/OIDC, Infisical-ready)
- ArgoCD ApplicationSet (syncWave) + per-chart dip-values overlays
- doc/victoria-metrics-architecture.md, define-chart-resources updates
- includes pending working-tree changes (mlflow, kubeflow, apisix, CLAUDE.md)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

manifests/helm/victoria-metrics-cluster/0.43.0/values-sidecar.yaml

@@ -0,0 +1,58 @@
+# Example extra values files to add an auth proxy sidecar container
+---
+extraContainers: &extraContainers
+  - name: vmauth
+    securityContext:
+      {}
+    image: "victoriametrics/vmauth:latest"
+    workingDir: /
+    args:
+      - -auth.config=/config/auth.yml
+      - -envflag.enable=true
+      - -envflag.prefix=VM_
+      - -loggerFormat=json
+    imagePullPolicy: IfNotPresent
+    ports:
+      - name: proxy
+        containerPort: 8427
+    readinessProbe:
+      httpGet:
+        path: /health
+        port: proxy
+      initialDelaySeconds: 5
+      periodSeconds: 15
+    livenessProbe:
+      tcpSocket:
+        port: proxy
+      initialDelaySeconds: 5
+      periodSeconds: 15
+      timeoutSeconds: 5
+    volumeMounts:
+      - name: auth-config
+        mountPath: /config
+    resources:
+      {}
+
+vminsert:
+  extraContainers: *extraContainers
+  extraVolumes:
+  - name: auth-config
+    secret:
+      secretName: vminsert-auth-config
+  service:
+    extraPorts:
+    - name: proxy
+      port: 8427
+      targetPort: proxy
+
+vmselect:
+  extraContainers: *extraContainers
+  extraVolumes:
+  - name: auth-config
+    secret:
+      secretName: vmselect-auth-config
+  service:
+    extraPorts:
+    - name: proxy
+      port: 8427
+      targetPort: proxy