Serve preview URLs over Traefik+TLS, stabilize them, and speed up builds.

Ingress / preview URLs:
- Default the app Ingress class and ACME HTTP-01 solver to Traefik
  (k3s default) via a new INGRESS_CLASS env, instead of hardcoding nginx —
  fixes 404s on clusters without ingress-nginx.
- Only put public, real-TLD hosts (custom domain + preview) in the TLS
  block; the internal *.apps.cloudhost.local host no longer poisons the
  Let's Encrypt order, so certs actually issue.
- Make the per-app preview number stable across redeploys so URLs stop
  breaking, and let PREVIEW_BASE_DOMAIN configure the base domain.

Registry pulls:
- Point the k3s registries.yaml mirror endpoint at the registry NodePort on
  loopback so node containerd never depends on cluster DNS (image pulls
  survive node restarts).

Builds:
- Pin the Kaniko image, use IfNotPresent pull policy, drop the dead build
  queue/processor, and retry transient Kubernetes API errors while polling
  build jobs.

Logs & apps list:
- fluent-bit reads log files from head so startup output reaches
  Elasticsearch.
- Order joined deployments newest-first so the apps list shows the latest
  deployment status.

Allocation:
- Reserve in-flight (pending/building) capacity and stop globally degrading
  the cluster on a single allocation failure, so concurrent deploys don't
  starve or wrongly report "no healthy cluster".

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

backend/src/applications/applications.service.ts

@@ -159,7 +159,9 @@ export class ApplicationsService {
       .createQueryBuilder('app')
       .leftJoinAndSelect('app.deployments', 'deployments')
       .where('app.userId = :userId', { userId })
-      .orderBy('app.createdAt', 'DESC');
+      .orderBy('app.createdAt', 'DESC')
+      // Ensure deployments[0] is the most recent so the UI shows the latest status.
+      .addOrderBy('deployments.createdAt', 'DESC');
 
     if (options?.productType === 'application') {
       qb.andWhere(
@@ -184,7 +186,9 @@ export class ApplicationsService {
       .createQueryBuilder('app')
       .leftJoinAndSelect('app.user', 'user')
       .leftJoinAndSelect('app.deployments', 'deployments')
-      .orderBy('app.createdAt', 'DESC');
+      .orderBy('app.createdAt', 'DESC')
+      // Ensure deployments[0] is the most recent so the UI shows the latest status.
+      .addOrderBy('deployments.createdAt', 'DESC');
 
     if (search && search.trim()) {
       const s = `%${search.trim()}%`;