production: Deploy webapp (& dependent read-only services) to dynamic infra

Deploy dependent services first then the webapp:

• swh/infra/ci-cd/swh-charts!268 (merged): Deploy swh-search read-only rpc
• swh/infra/ci-cd/swh-charts!268 (merged): Deploy swh-storage read-only rpc
• swh/infra/ci-dc/swh-charts!268: Migrate services to use the read-only storage
• Deploy ^
• Loop, deploy, analyze, fix papercuts until it works
• swh/infra/ci-cd/swh-charts!269 (merged): rpc: make indexer-storage multi-deployment instance
• Deploy
• swh/infra/ci-cd/swh-charts!269 (merged): Deploy swh-indexer-storage read-only rpc to production
• Deploy
• swh/infra/ci-cd/swh-charts!270 (merged): Deploy swh-web instance which uses the previous rpc services ^
• Loop, deploy, analyze, fix papercuts until it works
• Checks
• swh/infra/puppet/puppet-swh-site!675 (merged): Expose new webapp instance publicly (recycle webapp1.internal.s.o cname)
• vangogh.euwest.azure is blocked by the firewall, so this needs adaptation
• Checks
  • browsing
  • logging to keycloak
  • cooking
  • save-code-now (access and trigger)
  • api accesses
  • access to features
    • save-code-now (public & moderation uis)
    • add-forge-now (public & moderation uis)
    • deposit (fail) as it's missing the configuration
    • Loop, deploy, analyze, fix papercuts until it works
    • deposit moderation ui
• swh/infra/ci-cd/swh-charts!271 (merged): https://webapp1.internal.softwareheritage.org/graphql/ should be reachable

post-migration:

• swh/infra/puppet/puppet-swh-site!675 (merged): Decommission webapp1.production webapp services

Refs. #5110 (closed)