redesign fully scaffolded and web login works

deploy/k8s/prod/kustomization.yaml

@@ -1,12 +1,10 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
-# Note: namespaces are defined in base; workloads go to dexorder-system
-namespace: dexorder-system
-
 # Base resources (includes all security policies)
 resources:
   - ../base
+  - configs/gateway-config.yaml
 
 # Production patches
 patches:
@@ -18,13 +16,13 @@ patches:
 configMapGenerator:
   - name: relay-config
     files:
-      - config.yaml=../../configmaps/relay-config.yaml
+      - config.yaml=configs/relay-config.yaml
   - name: ingestor-config
     files:
-      - config.yaml=../../configmaps/ingestor-config.yaml
+      - config.yaml=configs/ingestor-config.yaml
   - name: flink-config
     files:
-      - config.yaml=../../configmaps/flink-config.yaml
+      - config.yaml=configs/flink-config.yaml
 
 # Secrets (managed via kubectl, not committed)
 # These are created by bin/secret-update prod