feat: default locale Russian, geo determines language for other countries

- localization-svc: defaultLocale ru, resolveLocale only by geo
- web-svc: DEFAULT_LOCALE ru, layout lang=ru, embeddedTranslations fallback ru
- countryToLocale: default ru when no country or unknown country

Co-authored-by: Cursor <cursoragent@cursor.com>

deploy/k3s/ingress-production.yaml

@@ -0,0 +1,43 @@
+# Production Ingress для gooseek.ru — HTTPS
+# cert-manager создаёт Secret gooseek-tls автоматически (Let's Encrypt)
+# Требования: DNS gooseek.ru → IP ingress-nginx, порт 80 доступен из интернета
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: gooseek-production
+  namespace: gooseek
+  annotations:
+    kubernetes.io/ingress.class: nginx
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    # Добавить ACME challenge в этот ingress (избегает 404 при отдельном challenge ingress)
+    acme.cert-manager.io/http01-edit-in-place: "true"
+spec:
+  ingressClassName: nginx
+  tls:
+    - hosts:
+        - gooseek.ru
+        - www.gooseek.ru
+      secretName: gooseek-tls
+  rules:
+    - host: gooseek.ru
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: web-svc
+                port:
+                  number: 3000
+    - host: www.gooseek.ru
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: web-svc
+                port:
+                  number: 3000