Add TeslaMate deployment for Tesla Model Y data logging (#47)

## Summary
- Add TeslaMate k8s deployment with Tailscale ingress at tesla.tail8d86e.ts.net
- Add teslamate user to CloudNativePG blumeops-pg cluster
- Add TeslaMate PostgreSQL datasource to Grafana
- Import 18 TeslaMate Grafana dashboards for charging, drives, efficiency, etc.
- Add teslamate database to borgmatic backup configuration

## Deployment and Testing
- [ ] Create 1Password items: "TeslaMate DB Password" and "TeslaMate Encryption Key"
- [ ] Apply database user secret: `op inject -i argocd/manifests/databases/secret-teslamate.yaml.tpl | kubectl apply -f -`
- [ ] Sync blumeops-pg: `argocd app sync blumeops-pg`
- [ ] Create teslamate database
- [ ] Apply teslamate secrets (encryption key, db connection)
- [ ] Apply Grafana datasource secret: `op inject -i argocd/manifests/grafana-config/secret-teslamate-datasource.yaml.tpl | kubectl apply -f -`
- [ ] Sync apps and teslamate: `argocd app sync apps teslamate grafana grafana-config`
- [ ] Complete Tesla API OAuth flow at https://tesla.tail8d86e.ts.net
- [ ] Verify data collection starts
- [ ] Verify Grafana dashboards show data

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Reviewed-on: https://forge.tail8d86e.ts.net/eblume/blumeops/pulls/47

argocd/apps/apps.yaml

@@ -17,5 +17,4 @@ spec:
   syncPolicy:
     syncOptions:
       - CreateNamespace=true
-  # Manual sync only - no automated sync on git push
   # To pick up new apps: argocd app sync apps

argocd/apps/argocd.yaml

@@ -17,4 +17,3 @@ spec:
   syncPolicy:
     syncOptions:
       - CreateNamespace=true
-  # Manual sync only - no automated sync on git push

argocd/apps/blumeops-pg.yaml

@@ -21,4 +21,3 @@ spec:
   syncPolicy:
     syncOptions:
       - CreateNamespace=true
-  # Manual sync only - no automated sync on git push

argocd/apps/cloudnative-pg.yaml

@@ -12,7 +12,7 @@ spec:
   sources:
     # Helm chart from forge mirror (SSH via egress)
     - repoURL: ssh://forgejo@indri.tail8d86e.ts.net:2200/eblume/cloudnative-pg-charts.git
-      targetRevision: cloudnative-pg-v0.23.0
+      targetRevision: cloudnative-pg-v0.27.0
       path: charts/cloudnative-pg
       helm:
         releaseName: cloudnative-pg
@@ -29,4 +29,3 @@ spec:
     syncOptions:
       - CreateNamespace=true
       - ServerSideApply=true  # Required for large CRDs that exceed annotation size limit
-  # Manual sync only - no automated sync on git push

argocd/apps/devpi.yaml

@@ -27,4 +27,3 @@ spec:
   syncPolicy:
     syncOptions:
       - CreateNamespace=true
-  # Manual sync only - no automated sync on git push

argocd/apps/grafana-config.yaml

@@ -22,4 +22,3 @@ spec:
   syncPolicy:
     syncOptions:
       - CreateNamespace=true
-  # Manual sync only - no automated sync on git push

argocd/apps/grafana.yaml

@@ -31,4 +31,3 @@ spec:
   syncPolicy:
     syncOptions:
       - CreateNamespace=true
-  # Manual sync only - no automated sync on git push

argocd/apps/miniflux.yaml

@@ -25,4 +25,3 @@ spec:
   syncPolicy:
     syncOptions:
       - CreateNamespace=true
-  # Manual sync only - no automated sync on git push

argocd/apps/tailscale-operator.yaml

@@ -23,4 +23,3 @@ spec:
   syncPolicy:
     syncOptions:
       - CreateNamespace=true
-  # Manual sync only - no automated sync on git push

argocd/apps/teslamate.yaml

@@ -0,0 +1,32 @@
+# TeslaMate Tesla Data Logger
+# Requires: CloudNativePG PostgreSQL cluster and manual secret setup
+#
+# Before syncing, create the namespace and secrets:
+#   kubectl create namespace teslamate
+#   op inject -i argocd/manifests/databases/secret-teslamate.yaml.tpl | kubectl apply -f -
+#   op inject -i argocd/manifests/teslamate/secret-encryption-key.yaml.tpl | kubectl apply -f -
+#   op inject -i argocd/manifests/teslamate/secret-db.yaml.tpl | kubectl apply -f -
+#
+# Then create the database:
+#   PGPASSWORD=$(op --vault blumeops item get <eblume-item-id> --fields password --reveal) \
+#     psql -h pg.tail8d86e.ts.net -U eblume -c "CREATE DATABASE teslamate OWNER teslamate;"
+#
+# After syncing, access the TeslaMate UI at https://tesla.tail8d86e.ts.net to complete
+# Tesla API authentication via OAuth flow.
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: teslamate
+  namespace: argocd
+spec:
+  project: default
+  source:
+    repoURL: ssh://forgejo@indri.tail8d86e.ts.net:2200/eblume/blumeops.git
+    targetRevision: main
+    path: argocd/manifests/teslamate
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: teslamate
+  syncPolicy:
+    syncOptions:
+      - CreateNamespace=true