fix: restore deployment — ingress routing, readiness probes, rate limiter

- Ingress: route /api/* on gooseek.ru to api-gateway (was going to webui)
- api-gateway: move /health and /ready before JWT/rate-limit middleware
  to prevent liveness probe 429 failures causing CrashLoopBackOff
- Readiness probes: fix agent-svc, search-svc, scraper-svc to use /health
  (they don't implement /ready endpoint, causing permanent 0/1 status)
- ConfigMap: add missing CHAT_SVC_URL and API_GATEWAY_URL
- deploy.sh: also clean up misplaced NetworkPolicy from gooseek namespace
- webui: add Next.js rewrites to proxy /api/* to api-gateway

Made-with: Cursor

backend/deploy/k8s/agent-svc.yaml

@@ -41,7 +41,7 @@ spec:
           periodSeconds: 20
         readinessProbe:
           httpGet:
-            path: /ready
+            path: /health
             port: 3018
           initialDelaySeconds: 10
           periodSeconds: 15