traefik: pin chart <41.0.0 to unblock infrastructure reconcile

The HelmRelease used an unbounded range (>=37.0.0), which auto-resolved
to chart 41.0.0. That release removed the root 'logs' key from the
values schema, so the Helm upgrade failed validation
('additional properties \'logs\' not allowed'), the traefik HR never
went Ready, and the infrastructure Kustomization's health check stalled
in 'Reconciliation in progress' — gating every dependent app
(paperless, authentik, home-assistant, ...).

Constrain to the working 40.x line. The 41.x values migration is
deferred and should be done deliberately.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

kubernetes/infrastructure/traefik/helmrelease.yaml

@@ -22,7 +22,13 @@ spec:
   chart:
     spec:
       chart: traefik
-      version: ">=37.0.0"
+      # Pinned below 41.0.0: that release dropped the root `logs` key from
+      # the values schema (`additional properties 'logs' not allowed`), so
+      # an unconstrained range auto-upgraded into a failing Helm upgrade
+      # that wedged the whole `infrastructure` Kustomization health check.
+      # Stay on the working 40.x line; migrate the values to the 41.x
+      # schema deliberately before lifting this ceiling.
+      version: ">=37.0.0,<41.0.0"
       sourceRef:
         kind: HelmRepository
         name: traefik