REFACTOR(traefik): use IngressRoute with proper ServersTransport

- Convert from standard Ingress to Traefik IngressRoute
- IngressRoute directly references ServersTransport for HTTPS backend
- Keep minimal Ingress for cert-manager TLS certificate issuance

crafty/ingress.yaml

@@ -1,13 +1,31 @@
-apiVersion: networking.k8s.io/v1
+apiVersion: traefik.io/v1alpha1
-kind: Ingress
+kind: IngressRoute
 metadata:
   name: crafty-ingress
   namespace: crafty
   annotations:
     cert-manager.io/cluster-issuer: "letsencrypt-prod"
-    traefik.ingress.kubernetes.io/router.tls: "true"
+spec:
-    traefik.ingress.kubernetes.io/service.serversscheme: "https"
+  entryPoints:
-    traefik.ingress.kubernetes.io/service.serverstransport: "crafty-crafty-insecure@kubernetescrd"
+    - websecure
+  routes:
+    - match: Host(`crafty0213.kro.kr`)
+      kind: Rule
+      services:
+        - name: crafty
+          port: 8443
+          scheme: https
+          serversTransport: crafty-insecure
+  tls:
+    secretName: crafty-tls
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: crafty-tls-cert
+  namespace: crafty
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
 spec:
   ingressClassName: traefik
   tls: