fix: remove argocd-server https port and disable auth for headlamp plugin

- Removes https:443 port from argocd-server service (redundant in insecure mode)
  so K8s API proxy can resolve service endpoint without ambiguity
- Adds server.disable.auth=true to allow headlamp plugin unauthenticated API access
  (external access protected by Traefik OIDC)

manifest/overlays/production/argocd-cmd-params-cm-patch.yaml

@@ -6,3 +6,4 @@ metadata:
 data:
   redis.server: shared-redis.data:6379
   server.insecure: "true"
+  server.disable.auth: "true"