Fix degraded ArgoCD applications

- frigate: Remove duplicate PVCs (Helm manages them), update config size to 15Gi
- gitlab: Fix sync-admin-job secretKeyRef schema error, fetch password via kubectl
- nextcloud: Remove duplicate PVC, remove invalid pod-level securityContext
- rook-ceph: Update cephfs-smb-pvc to 50Gi, remove unsupported dashboard.config
- nessus: Add privileged PSS label for NET_ADMIN/NET_RAW capabilities
- scylla-manager: Add privileged PSS label for SYS_NICE capability
- n8n: Create missing n8n-main-persistence PVC
- projects: Add authentik namespace to applications project destinations

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

infrastructure/rook-ceph/cluster-values.yaml

@@ -64,13 +64,6 @@ cephClusterSpec:
     enabled: true
     ssl: false  # TLS handled by ingress
     port: 7000
-    # Authentication: OAuth2-Proxy via ingress annotations
-    # See: infrastructure/rook-ceph/ingress.yaml
-    # Blueprint: infrastructure/authentik/ceph-dashboard-blueprint.yaml
-    config:
-      mgr/dashboard/standby_behaviour: "error"
-      mgr/dashboard/remote_user_header: "X-Forwarded-User"
-      mgr/dashboard/remote_user_trust_proxy: "true"
 
   # Network configuration
   network:

infrastructure/rook-ceph/manifests/smb-gateway.yaml

@@ -11,7 +11,7 @@ spec:
   storageClassName: rook-cephfs
   resources:
     requests:
-      storage: 1Gi
+      storage: 50Gi
 ---
 apiVersion: apps/v1
 kind: Deployment