Ensure liveness, readiness and startup probes on all workloads

Every container in every Deployment/StatefulSet now defines all three
probes. The paperless-ngx consume CronJob intentionally has none (batch
workload).

- Add probes: apache-tika, calibre-web-automated, cyberchef, gotenberg,
  homeassistant, patchmon-backend, samba (tcp/445), teamspeak-server
  (tcp/30033), zipline (/api/healthcheck)
- Fix voucher-vault null probe values with real defaults
- Fix startup-probe semantics in template-chart and rallly (no
  initialDelaySeconds, generous failureThreshold)
- Switch outline probes to its /_health endpoint
- Add readiness/startup probes to satisfactory
- Add startup probes to matrix-synapse, matrix-delegation-nginx,
  paperless-server, patchmon-frontend, urlaubsverwaltung
- Major version bump for all published charts

patchmon/templates/patchmon-backend.deployment.yaml

@@ -135,7 +135,30 @@ spec:
               value: "https://{{ .Values.ingress.domain }}"
             - name: TRUST_PROXIES
               value: "1"
-          # TODO: Add liveness and readiness probes
+          # The backend exposes GET /health returning {"status": "ok"}.
+          livenessProbe:
+            httpGet:
+              path: /health
+              port: 3001
+            periodSeconds: 10
+            timeoutSeconds: 5
+            failureThreshold: 3
+          readinessProbe:
+            httpGet:
+              path: /health
+              port: 3001
+            periodSeconds: 10
+            timeoutSeconds: 5
+            failureThreshold: 3
+          # The startup probe gates liveness/readiness. The backend waits for
+          # the database and runs migrations on startup: budget 10s * 30 = 300s.
+          startupProbe:
+            httpGet:
+              path: /health
+              port: 3001
+            periodSeconds: 10
+            timeoutSeconds: 5
+            failureThreshold: 30
           {{- with .Values.patchmon.backend.resources }}
           resources:
             {{ toYaml . | nindent 12 }}

patchmon/templates/patchmon-frontend.deployment.yaml

@@ -37,7 +37,6 @@ spec:
             httpGet:
               path: /
               port: 3000
-            initialDelaySeconds: 30
             periodSeconds: 10
             timeoutSeconds: 5
             failureThreshold: 3
@@ -45,10 +44,17 @@ spec:
             httpGet:
               path: /
               port: 3000
-            initialDelaySeconds: 5
             periodSeconds: 10
             timeoutSeconds: 5
             failureThreshold: 3
+          # The startup probe gates liveness/readiness. Startup budget = 5s * 30 = 150s.
+          startupProbe:
+            httpGet:
+              path: /
+              port: 3000
+            periodSeconds: 5
+            timeoutSeconds: 5
+            failureThreshold: 30
           volumeMounts:
             - name: patchmon-volume
               mountPath: /usr/share/nginx/html/assets