authentik: serve auth.scoutingmbg.nl

A Gateway listener with its own certificate, the authentik route on both
hostnames, and an authentik brand for auth.scoutingmbg.nl that logs in
through Scouts Online and then sends people to the photos. The
authentik.rubenhensen.nl brand stays as it is.

gateway/gateway.yaml

@@ -58,6 +58,20 @@ spec:
         selector:
           matchLabels:
             kubernetes.io/metadata.name: authentik
+  - name: https-auth-scoutingmbg
+    protocol: HTTPS
+    port: 443
+    hostname: auth.scoutingmbg.nl
+    tls:
+      certificateRefs:
+      - name: auth-scoutingmbg-tls
+        namespace: authentik
+    allowedRoutes:
+      namespaces:
+        from: Selector
+        selector:
+          matchLabels:
+            kubernetes.io/metadata.name: authentik
   - name: https-vic
     protocol: HTTPS
     port: 443