REFACTOR(umami): move dual ingress to manifests

- Move ingress.yaml to manifests/ (public + protected ingress)
- Keep ingress disabled in helm-values.yaml due to complex routing

umami/kustomization.yaml

@@ -2,4 +2,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
 - vault/umami-password.yaml
-- ingress.yaml
+- manifests/ingress.yaml