Add bolletjestrui app + vic.rubenhensen.nl

Deploys ghcr.io/rubenhensen/bolletjestrui at vic.rubenhensen.nl:
- bolletjestrui/ folder: deployment (SQLite on a PVC, migrate-on-start,
  ORIGIN + raised BODY_SIZE_LIMIT for GPX uploads), service, nginx
  ingress with prod-cluster-issuer TLS, PVC, and a Vault ExternalSecret
  (kv/bolletjestrui: site_password, admin_password, key_secret).
- apps/templates/bolletjestrui-folder.yaml: ArgoCD Application.
- dns: vic A record -> 46.224.26.65 (ingress LB).
- renovate: watch bolletjestrui/ for image tag bumps.

Committed locally, not pushed: needs the Vault secret created and the
ghcr package made public first.

dns/domains/rubenhensen.nl.yaml

@@ -59,6 +59,10 @@ records:
     expire: 300
     type: A
     content: "46.224.26.65"
+  - name: "vic"
+    expire: 300
+    type: A
+    content: "46.224.26.65"
   - name: "@"
     expire: 300
     type: MX