Reduce CPU load on ifirn.

- gerrit: Raise memory limit to 1536Mi and heap to 768m to end the
  OOM crash loop (~14.8k restarts).  Sync image (3.8.2-1) and the
  reindex init container with the deployed state.
- ingress-nginx: Rate-limit crawlers per bot family (10 r/m, burst
  20, 429).  Sync proxy-buffer-size with the deployed value (64k).
- renovate: Suspend (failing with "Authentication failure" since
  2025-07); disable job retries.
- gitlab: Pin mailroom HPA to one replica.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Change-Id: Iee1ca510fbb80b53d0a1ae424f55d4d1d94c1e38
4 files changed