feat: add harmonic-wordpress dev environment on Legion

- Add harmonic-wordpress namespace
- WordPress + MySQL deployment with PVCs and ExternalSecrets
- Ingress for dev.harmonic-framework.com via Traefik + cert-manager
- Argo CD Application watching k8s/harmonic-wordpress/
- Add public Gitea repo credential for git.neuralplatform.ai

servers/legion/argocd.tf

@@ -83,7 +83,7 @@ resource "kubernetes_ingress_v1" "argocd" {
   depends_on = [helm_release.argocd, helm_release.cert_manager]
 }
 
-# Gitea repo credentials for Argo CD
+# Gitea repo credentials for Argo CD (internal cluster IP)
 # Label argocd.argoproj.io/secret-type=repository tells Argo CD to use this as a repo credential
 resource "kubernetes_secret" "argocd_gitea_repo" {
   metadata {
@@ -104,6 +104,26 @@ resource "kubernetes_secret" "argocd_gitea_repo" {
   depends_on = [helm_release.argocd]
 }
 
+# Gitea repo credentials via public hostname (for apps referencing git.neuralplatform.ai)
+resource "kubernetes_secret" "argocd_gitea_repo_public" {
+  metadata {
+    name      = "argocd-repo-gitea-infrastructure-public"
+    namespace = kubernetes_namespace.argocd.metadata[0].name
+    labels = {
+      "argocd.argoproj.io/secret-type" = "repository"
+    }
+  }
+
+  data = {
+    type     = "git"
+    url      = "https://git.neuralplatform.ai/will/infrastructure.git"
+    username = "will"
+    password = var.gitea_api_token
+  }
+
+  depends_on = [helm_release.argocd]
+}
+
 # Root application — watches servers/legion/apps/ for app manifests
 resource "kubernetes_manifest" "argocd_root_app" {
   manifest = {