REFACTOR(repo): restructure infra folder structure

- Remove argocd/, helm-values/, ingress/ subdirectories
- Move files to parent directory with standardized names
- Add namespace.yaml to all apps with Goldilocks labels
- Preserve vault/ subdirectories (falco, velero)
- Update main kustomization.yaml to reference argocd.yaml files directly
- Comment out argocd.yaml in each app's kustomization.yaml to prevent
  circular reference

Applications restructured:
- cert-manager (2 ArgoCD apps)
- external-secrets
- reloader
- vault (2 ArgoCD apps)
- velero (2 ArgoCD apps)
- falco
- cnpg
- haproxy
- metallb
- vpa
- argocd

external-secrets/kustomization.yaml

@@ -2,5 +2,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
-  # ArgoCD Application 리소스는 infrastructure/kustomization.yaml에서 관리
+  # argocd.yaml은 수동으로 관리 (순환 참조 방지)
-  # - argocd/external-secrets.yaml
+  # - argocd.yaml
+  - namespace.yaml

external-secrets/namespace.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: external-secrets
+  labels:
+    goldilocks.fairwinds.com/enabled: "true"

falco/kustomization.yaml

@@ -2,10 +2,11 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
-  # ArgoCD Application 리소스는 root kustomization.yaml에서 관리
+  # argocd.yaml은 수동으로 관리 (순환 참조 방지)
-  # - argocd/falco.yaml
+  # - argocd.yaml
+  - namespace.yaml
 
   # Falco UI credentials from Vault
   - vault/falco-ui-secret.yaml
   # Falco UI Ingress
-  - ingress/falco-ui-ingress.yaml
+  - ingress.yaml

falco/namespace.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: falco
+  labels:
+    goldilocks.fairwinds.com/enabled: "true"

vault/kustomization.yaml

@@ -2,9 +2,10 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
-  # ArgoCD Application 리소스는 infrastructure/kustomization.yaml에서 관리
+  # argocd.yaml files은 수동으로 관리 (순환 참조 방지)
-  # - argocd/vault.yaml
+  # - argocd-vault.yaml
-  # - argocd/vault-secrets.yaml
+  # - argocd-secrets.yaml
+  - namespace.yaml
 
   # External Secrets integration
   # ServiceAccount is managed by external-secrets Helm chart

vault/namespace.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: vault
+  labels:
+    goldilocks.fairwinds.com/enabled: "true"