Ingress

This draft captures a real ingress debugging flow on a bare-metal cluster: verify the service IP, inspect the ingress objects, deal with a Helm ownership conflict, reinstall the controller cleanly, and confirm that the new ingress class is actually serving the expected backend.