Add unified logs platform with Helm-managed central Elasticsearch.

Deploy cloudhost-logging on cluster registration, ship app and optional service logs to ES with owner isolation, and fix Kibana 8.12 auth via kibana_system.

Co-authored-by: Cursor <cursoragent@cursor.com>

frontend/src/types/index.ts

@@ -77,6 +77,36 @@ export interface ServiceAccessConnection {
   url?: string;
 }
 
+export type LogWorkload = 'app' | 'redis' | 'rabbitmq' | 'database';
+
+export interface LogEntry {
+  id: string;
+  timestamp: string;
+  level: string;
+  message: string;
+  applicationId?: string;
+  applicationName?: string;
+  workload?: LogWorkload | string;
+  namespace?: string;
+  pod?: string;
+}
+
+export interface LogSearchResult {
+  hits: LogEntry[];
+  total: number;
+  page: number;
+  limit: number;
+}
+
+export interface LogStatsResult {
+  total: number;
+  errors: number;
+  warnings: number;
+  byLevel: Record<string, number>;
+  byWorkload: Record<string, number>;
+  period: string;
+}
+
 export interface ServiceAccessGrant {
   id: string;
   target: ServiceAccessTarget;