fix: duplicate vault component — apps/vault vs infra/vault

[patrick-hermann-sva]

Summary

Both apps/vault and infra/vault deploy HashiCorp Vault from the same chart (charts/vault/vault from oci://ghcr.io/stuttgart-things).

Comparison

Aspect	apps/vault	infra/vault
HelmRelease API	v2beta1 (deprecated)	v2 (current)
Source API	v1beta2	v1 (current)
Ingress	nginx (configurable)	Disabled
Gateway API	None	httproute.yaml
Injector	Enabled	Disabled
Pre-release	Certificate via sthings-cluster	None
README	Yes	No
Substitution bugs	Yes (:= syntax)	None

Recommendation

Vault is infrastructure (secrets management) and belongs in infra/. infra/vault is more modern (current API versions, Gateway API). Consider:

1. Adding a README to infra/vault
2. Porting any needed features (pre-release certificate, injector config) from apps/vault to infra/vault
3. Removing apps/vault