(production) nginx-ingress should only run on fast nodes

The nginx ingress can get scheduled on any node. Sometimes that means that it gets scheduled on banco, which is at the other end of a 1Gbps link.

We should ensure that we can either allow- or blocklist hosts for the ingress deployment to better control where it runs.