feat(envs): add staging and prod environments

Clone dev into envs/staging and envs/prod, deploying to namespaces
dbiz-staging and dbiz-prod on the same cluster. App names suffixed per
env, destination namespaces + external-services namespaces + ingress
hosts adjusted. Monitoring kept as a single cluster-wide stack in dev
(not duplicated). Sealed secrets left empty pending per-namespace
re-seal (sealed secrets are namespace-scoped).

envs/staging/infra/external-services.yaml

@@ -0,0 +1,83 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: oracle-db
+  namespace: dbiz-staging
+spec:
+  ports:
+  - port: 1521
+    targetPort: 1521
+---
+apiVersion: v1
+kind: Endpoints
+metadata:
+  name: oracle-db
+  namespace: dbiz-staging
+subsets:
+- addresses:
+  - ip: 192.168.110.174
+  ports:
+  - port: 1521
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: redis
+  namespace: dbiz-staging
+spec:
+  ports:
+  - port: 6379
+    targetPort: 6379
+---
+apiVersion: v1
+kind: Endpoints
+metadata:
+  name: redis
+  namespace: dbiz-staging
+subsets:
+- addresses:
+  - ip: 192.168.110.72
+  ports:
+  - port: 6379
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: kafka
+  namespace: dbiz-staging
+spec:
+  ports:
+  - port: 9092
+    targetPort: 9092
+---
+apiVersion: v1
+kind: Endpoints
+metadata:
+  name: kafka
+  namespace: dbiz-staging
+subsets:
+- addresses:
+  - ip: 192.168.110.70
+  ports:
+  - port: 9092
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: seaweedfs-s3
+  namespace: dbiz-staging
+spec:
+  ports:
+  - port: 8888
+    targetPort: 8888
+---
+apiVersion: v1
+kind: Endpoints
+metadata:
+  name: seaweedfs-s3
+  namespace: dbiz-staging
+subsets:
+- addresses:
+  - ip: 192.168.110.71
+  ports:
+  - port: 8888