Home-lab ingress components

Component	Responsibility
Deployment	Run the storefront image on port 3000 with readiness and liveness checks.
Service	Provide a stable in-cluster endpoint for the storefront pods.
Ingress / GitOps binding	Remains a release input; the application chart does not authorize deployment by itself.

Image publication and GitOps onboarding remain blocked until the approved Harbor secret name exists and an explicit release path is satisfied. No production PayPal configuration is permitted.