fix: add high sync-wave values for CRD-dependent resources

- ClusterIssuer letsencrypt-dns: wave 100 (after cert-manager installs CRDs)
- Certificate wildcard-syncjob: wave 101 (after ClusterIssuer)
- SealedSecrets: wave 50 (after sealed-secrets installs CRDs)

This ensures CRD-dependent resources sync after their parent
Applications have installed the required CRDs.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Author: justgithubaccount

platform/infrastructure/networking/cert-manager/base/cert-cluster.yaml

@@ -4,7 +4,7 @@ metadata:
   name: wildcard-syncjob
   namespace: chat-api
   annotations:
-    argocd.argoproj.io/sync-wave: "3" 
+    argocd.argoproj.io/sync-wave: "101" 
 spec:
   secretName: wildcard-syncjob-tls
   secretTemplate:

platform/infrastructure/networking/cert-manager/base/cloudflare-secrets.yaml

@@ -4,6 +4,8 @@ kind: SealedSecret
 metadata:
   name: cert-manager-secret
   namespace: cert-manager
+  annotations:
+    argocd.argoproj.io/sync-wave: "50"
 spec:
   encryptedData:
     CLOUDFLARE_TOKEN: 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

platform/infrastructure/networking/cert-manager/base/issuer-cluster.yaml

@@ -3,7 +3,7 @@ kind: ClusterIssuer
 metadata:
   name: letsencrypt-dns
   annotations:
-    argocd.argoproj.io/sync-wave: "2" 
+    argocd.argoproj.io/sync-wave: "100" 
 spec:
   acme:
     email: [email protected]

platform/infrastructure/networking/external-dns/base/cloudflare-secrets.yaml

@@ -4,6 +4,8 @@ kind: SealedSecret
 metadata:
   name: external-dns-secret
   namespace: external-dns
+  annotations:
+    argocd.argoproj.io/sync-wave: "50"
 spec:
   encryptedData:
     CLOUDFLARE_TOKEN: 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

platform/observability/monitoring/loki/loki-secrets-sealed.yaml

@@ -5,6 +5,8 @@ metadata:
   creationTimestamp: null
   name: loki-s3-secret
   namespace: observability
+  annotations:
+    argocd.argoproj.io/sync-wave: "50"
 spec:
   encryptedData:
     access_key: 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