Configure LuckPerms with PostgreSQL backend for persistent permissions

- LuckPerms stores all permissions/groups in Postgres (not ephemeral ops.json)
- Mount luckperms config.yml from ConfigMap with DB connection details
- LP_PASSWORD injected from same secret as DB_PASSWORD
- OPS env var kept as bootstrap until LuckPerms admin group is configured

servers/legion/k8s/mudcraft/statefulset.yaml

@@ -61,6 +61,11 @@ spec:
                 secretKeyRef:
                   name: mudcraft-secrets
                   key: db-password
+            - name: LP_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: mudcraft-secrets
+                  key: db-password
           volumeMounts:
             - name: worlds
               mountPath: /data/worlds
@@ -71,6 +76,9 @@ spec:
             - name: purpurextras-config
               mountPath: /data/plugins/PurpurExtras/config.yml
               subPath: config.yml
+            - name: luckperms-config
+              mountPath: /data/plugins/LuckPerms/config.yml
+              subPath: config.yml
           resources:
             requests:
               memory: 5Gi
@@ -107,3 +115,6 @@ spec:
         - name: purpurextras-config
           configMap:
             name: mudcraft-purpurextras
+        - name: luckperms-config
+          configMap:
+            name: mudcraft-luckperms