Add unified logs platform with Helm-managed central Elasticsearch.

Deploy cloudhost-logging on cluster registration, ship app and optional service logs to ES with owner isolation, and fix Kibana 8.12 auth via kibana_system.

Co-authored-by: Cursor <cursoragent@cursor.com>

backend/src/config/configuration.ts

@@ -34,6 +34,12 @@ export default () => ({
     serviceAccount: process.env.BUILD_SERVICE_ACCOUNT || 'kaniko-builder',
   },
 
+  elasticsearch: {
+    password: process.env.ELASTIC_PASSWORD || 'CloudHost2024!Secure',
+    fluentbitPassword: process.env.FLUENTBIT_PASSWORD || 'FluentBit2024!Writer',
+    kibanaPassword: process.env.KIBANA_SYSTEM_PASSWORD || 'Kibana2024!System',
+  },
+
   platform: {
     domain: process.env.PLATFORM_DOMAIN || 'apps.cloudhost.local',
     uploadDir: process.env.UPLOAD_DIR || './uploads',