SYS-673 update a couple k8s services, stabilize ingress for http streaming

[instantlinux]

Summary of Changes

• K8s service dependency updates - cert-manager, flannel, node-local-dns
• Adjust default params for ingress - immich, headscale

Why is this change being made?

Ingress-nginx was misconfigured for streaming http in two recently deployed helm charts (immich and headscale), causing nginx resource exhaustion and failure of the vhosts it serves at an increasing frequency (multiple times per day).

How was this tested? How can the reviewer verify your testing?

Trouble-shooting ingress-nginx was done with:

POD=nginx-ingress-controller-6db65f6994-j8kdv
kubectl exec $POD -- curl http://127.0.0.1:10246/nginx_status
kubectl exec $POD -- curl http://127.0.0.1:10254/metrics

Ran with updated ingress configurations for immich / headscale for 3+ days.

Completion checklist

• The pull request is linked to all related issues
• This change has unit test coverage
• Documentation has been updated
• Dependencies have been updated and verified