feat(auth): move trade login to traefik basicAuth

kustomize/base/frontend/deployment.yaml

@@ -16,7 +16,7 @@ spec:
         - name: gitea-registry
       containers:
         - name: frontend
-          image: rv32i.pl/trade/trade-frontend:k3s-20260106013603
+          image: rv32i.pl/trade/trade-frontend:sha-8217bae
           imagePullPolicy: IfNotPresent
           ports:
             - name: http

kustomize/overlays/staging/frontend-auth-patch.yaml

@@ -0,0 +1,12 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: trade-frontend
+spec:
+  template:
+    spec:
+      containers:
+        - name: frontend
+          env:
+            - name: BASIC_AUTH_MODE
+              value: "off"

kustomize/overlays/staging/frontend-ingress.yaml

@@ -5,6 +5,7 @@ metadata:
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-prod
     traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.middlewares: trade-staging-trade-basic-auth@kubernetescrd
 spec:
   ingressClassName: traefik
   tls:

kustomize/overlays/staging/kustomization.yaml

@@ -6,10 +6,12 @@ namespace: trade-staging
 resources:
   - ../../base
   - pgadmin.yaml
+  - trade-basic-auth-middleware.yaml
   - frontend-ingress.yaml
 
 patchesStrategicMerge:
   - hasura-patch.yaml
+  - frontend-auth-patch.yaml
 
 commonLabels:
   env: staging

kustomize/overlays/staging/trade-basic-auth-middleware.yaml

@@ -0,0 +1,9 @@
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: trade-basic-auth
+spec:
+  basicAuth:
+    secret: trade-basic-auth
+    realm: trade
+    removeHeader: true