hanzoai/ingress parses ingress.kubernetes.io/* — the traefik.ingress.kubernetes.io/*
prefix is silently ignored. On these 12 ingresses the dead annotations were
router.entrypoints + router.tls=true, which are ALSO redundant: cert-manager
(letsencrypt-prod) + spec.tls own the cert, the websecure entrypoint bakes in
tls.certresolver, and a global web->:443 redirect handles HTTP. So they express
nothing the spec doesn't — deleted rather than relocated. Zero behavior change
(they were never active). Load-bearing middleware annotations were already
swapped in dcc81a36; the 3 exchange files keep their explanatory comments.
zeekay
e9ce6f8470