Replace K8s ProxySQL with external Incus ProxySQL (192.168.9.140:6033)

Remove ProxySQL deployments, configmaps, and PVC from both anvil and
ironclad namespaces. Replace with selector-less Service + Endpoints
pointing to the Incus ProxySQL instance. Argo CD will prune the old
resources automatically.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

k8s/anvil/service-proxysql.yaml

@@ -3,14 +3,23 @@ kind: Service
 metadata:
   name: proxysql
 spec:
-  type: NodePort
-  selector:
-    app: proxysql
   ports:
   - name: mysql
     port: 3306
     targetPort: 6033
-    nodePort: 31943
   - name: admin
     port: 6032
     targetPort: 6032
+---
+apiVersion: v1
+kind: Endpoints
+metadata:
+  name: proxysql
+subsets:
+- addresses:
+  - ip: 192.168.9.140
+  ports:
+  - name: mysql
+    port: 6033
+  - name: admin
+    port: 6032