Remove nessus from cluster configuration

Remove all nessus references: ArgoCD project destination, Istio ambient
enrollment, waypoint gateway, authorization policies, ext-authz policy,
TLS certificate, ingress gateway host, Kyverno exclusion, and Authentik
forward-auth blueprint.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

infrastructure/istio/manifests/apps/authorization-policies-apps.yaml

@@ -273,30 +273,6 @@ spec:
             ipBlocks:
               - "10.244.0.0/16"
 
----
-# --- Nessus: Allow ingress + Prometheus + intra-namespace ---
-apiVersion: security.istio.io/v1
-kind: AuthorizationPolicy
-metadata:
-  name: allow-nessus-access
-  namespace: nessus
-spec:
-  action: ALLOW
-  rules:
-    # Intra-namespace
-    - from:
-        - source:
-            namespaces:
-              - nessus
-    - from:
-        - source:
-            namespaces:
-              - istio-system
-    - from:
-        - source:
-            namespaces:
-              - prometheus
-
 ---
 # --- Rancher: Allow ingress + Prometheus + intra-namespace ---
 apiVersion: security.istio.io/v1

infrastructure/istio/manifests/apps/namespace-enrollment-job.yaml

@@ -25,7 +25,7 @@ spec:
               echo "=== Enrolling app namespaces in Istio ambient mesh ==="
 
               # Enroll app namespaces in ambient mesh
-              APP_NAMESPACES=(argocd gitlab n8n nextcloud teslamate home-assistant frigate guacamole nessus cattle-system)
+              APP_NAMESPACES=(argocd gitlab n8n nextcloud teslamate home-assistant frigate guacamole cattle-system)
               for ns in "${APP_NAMESPACES[@]}"; do
                 echo "Enrolling $ns in ambient mesh..."
                 kubectl label namespace "$ns" istio.io/dataplane-mode=ambient --overwrite 2>/dev/null || true
@@ -34,7 +34,7 @@ spec:
 
               # Attach waypoint proxies for L7 policy enforcement
               echo "Attaching waypoint proxies to app namespaces..."
-              WAYPOINT_APP_NAMESPACES=(argocd gitlab n8n nextcloud teslamate home-assistant frigate guacamole nessus)
+              WAYPOINT_APP_NAMESPACES=(argocd gitlab n8n nextcloud teslamate home-assistant frigate guacamole)
               for ns in "${WAYPOINT_APP_NAMESPACES[@]}"; do
                 kubectl label namespace "$ns" istio.io/use-waypoint=waypoint --overwrite 2>/dev/null || true
               done