Add Gitea SSH host key to ArgoCD known_hosts via kustomize patch

Without this, ArgoCD rejects SSH connections to the in-cluster
Gitea service. Uses a patch file to replace the known_hosts
ConfigMap with defaults + Gitea key.

infra/kubernetes/argocd/kustomization.yaml

@@ -33,3 +33,7 @@ patches:
         name: argocd-cmd-params-cm
       data:
         server.insecure: "true"
+  - target:
+      kind: ConfigMap
+      name: argocd-ssh-known-hosts-cm
+    path: patch-ssh-known-hosts.yaml