++ sarex-contour: vault — снять nodeSelector dedicated=sts

chart vault-contour 0.2.3 прибивает server-под к нодам dedicated=sts,
в кластере их нет → под висел Pending. postRenderer + values обнуляют
nodeSelector/tolerations на StatefulSet и injector.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

infrastructure/vault/sarex-contour/vault.yaml

@@ -6,16 +6,39 @@ metadata:
 spec:
   interval: 5m
   timeout: 10m
+  postRenderers:
+    # chart 0.2.3 прибивает server-под к нодам dedicated=sts; в sarex-contour
+    # таких нод нет — снимаем nodeSelector/tolerations со StatefulSet.
+    - kustomize:
+        patches:
+          - target:
+              group: apps
+              version: v1
+              kind: StatefulSet
+              namespace: vault
+              name: vault-vault-contour
+            patch: |-
+              - op: replace
+                path: /spec/template/spec/nodeSelector
+                value: {}
+              - op: replace
+                path: /spec/template/spec/tolerations
+                value: []
   values:
     imagePullSecrets:
       - name: regcred
     backup:
       enabled: false
+    injector:
+      nodeSelector: {}
+      tolerations: []
     server:
       standalone:
         enabled: true
       ha:
         enabled: false
+      nodeSelector: {}
+      tolerations: []
       dataStorage:
         enabled: true
         size: 10Gi