Route the DNS admin ingress to the separate console

The ingress still sent the UI and admin API to the resolver after the console split. Route both paths through the console so OIDC callbacks and Kubernetes edits reach their owner, while keeping DoH on the resolver.

Include the console resources in Kustomize so GitOps deploys its configuration, permissions, workload and Service alongside the resolver.

deploy/k8s/kustomization.yaml

@@ -15,6 +15,7 @@ resources:
   - crds/rbac.yaml
   - 10-deployment.yaml
   - 20-service.yaml
+  - console/console.yaml
   - 30-ingress.yaml
 
 labels: