CronJobs referenced bare 'myorg-assistant:latest' which doesn't exist in
any registry, causing ImagePullBackOff on all 5 CronJobs for 9+ days.
Aligned with deployment.yaml:
- image: git.rogi.casa/roger/myorg-assistant/myorg-assistant:fcf79bf
- imagePullPolicy: Always
- imagePullSecrets: gitea-registry
Affected: deadline-checker, evening-summary, git-sync, morning-briefing, waiting-followup
The ingresses referenced a Cloudflare OriginIssuer 'prod-issuer' whose CRD
and controller are not installed in the cluster, so cert-manager could not
issue certs and Traefik served a default cert (invalid SSL). Switch to the
existing letsencrypt-prod ClusterIssuer with specific hostnames + per-app
secrets, matching the working ingresses (http-01 cannot issue wildcards).
