fix: bump argocd route timeout past Envoy's 15s default

Envoy Gateway's per-route default timeout (15s, unset anywhere in this
cluster) was cutting the connection to argocd-server mid-Sync, surfacing
as 'Gateway Timeout' in the UI — confirmed even a single-resource sync
hit exactly ~15.0s every attempt, ruling out chart size/congestion.

BackendTrafficPolicy on the argocd HTTPRoute raises requestTimeout to 120s.

bootstrap/apps/envoy-gateway-config.yaml

@@ -14,9 +14,7 @@ spec:
   destination:
     server: https://kubernetes.default.svc
     namespace: envoy-gateway-system
+  # Leaf app — manual sync only; root `bootstrap` app-of-apps stays automated.
   syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
     syncOptions:
       - SkipDryRunOnMissingResource=true

bootstrap/apps/envoy-gateway.yaml

@@ -20,10 +20,8 @@ spec:
   destination:
     server: https://kubernetes.default.svc
     namespace: envoy-gateway-system
+  # Leaf app — manual sync only; root `bootstrap` app-of-apps stays automated.
   syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
     syncOptions:
       - CreateNamespace=true
       - ServerSideApply=true

bootstrap/apps/metallb-config.yaml

@@ -14,10 +14,8 @@ spec:
   destination:
     server: https://kubernetes.default.svc
     namespace: metallb-system
+  # Leaf app — manual sync only; root `bootstrap` app-of-apps stays automated.
   syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
     syncOptions:
       - CreateNamespace=true
       - SkipDryRunOnMissingResource=true

bootstrap/apps/metallb.yaml

@@ -20,10 +20,8 @@ spec:
   destination:
     server: https://kubernetes.default.svc
     namespace: metallb-system
+  # Leaf app — manual sync only; root `bootstrap` app-of-apps stays automated.
   syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
     syncOptions:
       - CreateNamespace=true
   ignoreDifferences:

bootstrap/apps/nfs-provisioner.yaml

@@ -20,9 +20,7 @@ spec:
   destination:
     server: https://kubernetes.default.svc
     namespace: nfs-provisioner
+  # Leaf app — manual sync only; root `bootstrap` app-of-apps stays automated.
   syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
     syncOptions:
       - CreateNamespace=true

manifests/argocd/backend-traffic-policy.yaml

@@ -0,0 +1,13 @@
+apiVersion: gateway.envoyproxy.io/v1alpha1
+kind: BackendTrafficPolicy
+metadata:
+  name: argocd
+  namespace: argocd
+spec:
+  targetRefs:
+    - group: gateway.networking.k8s.io
+      kind: HTTPRoute
+      name: argocd
+  timeout:
+    http:
+      requestTimeout: 120s