[fty4]

Summary

Adds an optional Traefik IngressRoute (and cert-manager Certificate) to the outprint chart, following the pattern of #25 (paperless-gpt).

• ingressRoute.* values (disabled by default), templates/ingressroute.yaml, templates/certificate.yaml, README section
• The route sends the whole host to the injector. The injector already forwards /pdf/* to the Gateway and everything else to Outline, so no prefix-stripping middleware is needed
• ingressRoute.priority (optional) lets the route win over another router on the same host, e.g. Outline's own Ingress during a migration
• Rendering fails with a clear message if ingressRoute.enabled is set while injector.enabled=false
• Chart version 1.0.0 -> 1.1.0

Not touched: injector.ingress (plain Ingress) stays as is. Use one or the other.

Testing

• helm lint with ci/ct-values.yaml: passes
• Default values render no IngressRoute
• Enabled: renders IngressRoute (host -> <fullname>-injector:80, priority, tls) and Certificate
• injector.enabled=false + ingressRoute.enabled=true: fails with the explanatory message