feat(envs): add staging and prod environments

Clone dev into envs/staging and envs/prod, deploying to namespaces
dbiz-staging and dbiz-prod on the same cluster. App names suffixed per
env, destination namespaces + external-services namespaces + ingress
hosts adjusted. Monitoring kept as a single cluster-wide stack in dev
(not duplicated). Sealed secrets left empty pending per-namespace
re-seal (sealed secrets are namespace-scoped).

envs/staging/apps/infra.yaml

@@ -0,0 +1,20 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: dbiz-infra-staging
+  namespace: argocd
+spec:
+  project: default
+  source:
+    repoURL: https://git.renolation.com/renolation/argo-k8s.git
+    targetRevision: main
+    path: envs/staging/infra
+    directory:
+      recurse: true
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: dbiz-staging
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true

envs/staging/apps/platform-api.yaml

@@ -0,0 +1,24 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: platform-api-staging
+  namespace: argocd
+spec:
+  project: default
+  sources:
+    - repoURL: https://git.renolation.com/renolation/argo-k8s.git
+      targetRevision: main
+      path: charts/dbiz-springboot
+      helm:
+        valueFiles:
+          - $values/envs/staging/values/platform-api.yaml
+    - repoURL: https://git.renolation.com/renolation/argo-k8s.git
+      targetRevision: main
+      ref: values
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: dbiz-staging
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true

envs/staging/apps/root.yaml

@@ -0,0 +1,20 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: dbiz-root-staging
+  namespace: argocd
+spec:
+  project: default
+  source:
+    repoURL: https://git.renolation.com/renolation/argo-k8s.git
+    targetRevision: main
+    path: envs/staging/apps
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: argocd
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true

envs/staging/apps/sealed-secrets.yaml

@@ -0,0 +1,20 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: dbiz-secrets-staging
+  namespace: argocd
+spec:
+  project: default
+  source:
+    repoURL: https://git.renolation.com/renolation/argo-k8s.git
+    targetRevision: main
+    path: envs/staging/sealed-secrets
+    directory:
+      recurse: true
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: dbiz-staging
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true

envs/staging/apps/tenant-api.yaml

@@ -0,0 +1,24 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: tenant-api-staging
+  namespace: argocd
+spec:
+  project: default
+  sources:
+    - repoURL: https://git.renolation.com/renolation/argo-k8s.git
+      targetRevision: main
+      path: charts/dbiz-springboot
+      helm:
+        valueFiles:
+          - $values/envs/staging/values/tenant-api.yaml
+    - repoURL: https://git.renolation.com/renolation/argo-k8s.git
+      targetRevision: main
+      ref: values
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: dbiz-staging
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true