fix(tls): garmin-public deixa de disputar o cert; ingress principal e unico dono (2 hosts)

Corrige escolinha-tls que saiu com 1 host (faltava auth-escolinha), servindo TRAEFIK DEFAULT CERT no Keycloak.
Remove cert-manager annotation dos 96-ingress-garmin-public dos 4 tenants (o cert e emitido pelo ingress principal com [tenant, auth-tenant]).

tenants/acme/96-ingress-garmin-public.yaml

@@ -5,7 +5,6 @@ metadata:
   name: acme-garmin-public
   namespace: acme-prod
   annotations:
-    cert-manager.io/cluster-issuer: letsencrypt-prod
     traefik.ingress.kubernetes.io/router.middlewares: acme-prod-redirect-https@kubernetescrd
 spec:
   ingressClassName: traefik

tenants/demo/96-ingress-garmin-public.yaml

@@ -5,7 +5,6 @@ metadata:
   name: demo-garmin-public
   namespace: demo-prod
   annotations:
-    cert-manager.io/cluster-issuer: letsencrypt-prod
     traefik.ingress.kubernetes.io/router.middlewares: demo-prod-redirect-https@kubernetescrd
 spec:
   ingressClassName: traefik

tenants/escolinha/96-ingress-garmin-public.yaml

@@ -5,7 +5,6 @@ metadata:
   name: escolinha-garmin-public
   namespace: escolinha-prod
   annotations:
-    cert-manager.io/cluster-issuer: letsencrypt-prod
     traefik.ingress.kubernetes.io/router.middlewares: escolinha-prod-redirect-https@kubernetescrd
 spec:
   ingressClassName: traefik

tenants/piloto/96-ingress-garmin-public.yaml

@@ -5,7 +5,6 @@ metadata:
   name: piloto-garmin-public
   namespace: piloto-prod
   annotations:
-    cert-manager.io/cluster-issuer: letsencrypt-prod
     traefik.ingress.kubernetes.io/router.middlewares: piloto-prod-redirect-https@kubernetescrd
 spec:
   ingressClassName: traefik