fix: restore deployment — ingress routing, readiness probes, rate limiter

- Ingress: route /api/* on gooseek.ru to api-gateway (was going to webui)
- api-gateway: move /health and /ready before JWT/rate-limit middleware
  to prevent liveness probe 429 failures causing CrashLoopBackOff
- Readiness probes: fix agent-svc, search-svc, scraper-svc to use /health
  (they don't implement /ready endpoint, causing permanent 0/1 status)
- ConfigMap: add missing CHAT_SVC_URL and API_GATEWAY_URL
- deploy.sh: also clean up misplaced NetworkPolicy from gooseek namespace
- webui: add Next.js rewrites to proxy /api/* to api-gateway

Made-with: Cursor

backend/deploy/k8s/configmap.yaml

@@ -8,6 +8,7 @@ data:
   CRAWL4AI_URL: "http://crawl4ai:11235"
   REDIS_URL: "redis://redis:6379"
   DATABASE_URL: "postgres://gooseek:gooseek@postgres:5432/gooseek?sslmode=disable"
+  CHAT_SVC_URL: "http://chat-svc:3005"
   DISCOVER_SVC_URL: "http://discover-svc:3002"
   MASTER_AGENTS_SVC_URL: "http://agent-svc:3018"
   SEARCH_SVC_URL: "http://search-svc:3001"
@@ -23,6 +24,7 @@ data:
   AUTH_SVC_URL: "http://auth-svc:3050"
   TRAVEL_SVC_URL: "http://travel-svc:3035"
   ADMIN_SVC_URL: "http://admin-svc:3040"
+  API_GATEWAY_URL: "http://api-gateway:3015"
   OLLAMA_BASE_URL: "http://ollama:11434"
   OLLAMA_MODEL: "qwen3.5:9b"
   OLLAMA_EMBEDDING_MODEL: "qwen3-embedding:0.6b"