gitops/apps AGENTS

Application-owned workloads, stateful dependencies, and independently runnable operations live here. Keep environment-neutral manifests in each unit's base. Ingress hosts, image rollout references, environment labels, storage classes, retention, and Secret delivery differences belong in overlays/<env>.