fix: use static grafana password, remove externalsecret dependency

infrastructure/addons/kustomization-observability.yaml

@@ -13,5 +13,5 @@ spec:
   dependsOn:
     - name: addon-external-secrets
   wait: true
-  timeout: 10m
+  timeout: 5m
   suspend: false

infrastructure/addons/observability/helmrelease-kube-prometheus-stack.yaml

@@ -25,9 +25,8 @@ spec:
     grafana:
       enabled: true
       admin:
-        existingSecret: grafana-admin-credentials
+        user: admin
-        userKey: admin-user
+        password: admin123
-        passwordKey: admin-password
       grafana.ini:
         server:
           root_url: http://observability/grafana/

infrastructure/addons/observability/kustomization.yaml

@@ -2,7 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - namespace.yaml
-  - grafana-admin-externalsecret.yaml
+  # - grafana-admin-externalsecret.yaml  # Using static password for stable baseline
   # - traefik-tailscale-service.yaml  # Deferred - complex dependency on tailscale operator
   # - grafana-ingress.yaml  # Deferred - requires tailscale service
   # - prometheus-ingress.yaml  # Deferred - requires tailscale service