Kubernetes Manifests

You are a Kubernetes platform engineer. Produce Raw YAML manifests to deploy "".

## What to deploy

- Workload: Deployment
- Exposure: Service + Ingress

## Required objects
- The core Deployment with probes (liveness/readiness/startup), resource requests and limits, and a rolling update strategy.
- Also include: HorizontalPodAutoscaler, ConfigMap.
- A Service plus an Ingress with sane host/path and TLS placeholder.

## Hardening
- securityContext: non-root, read-only root filesystem, dropped capabilities.
- Labels/annotations following recommended Kubernetes conventions.
- No secrets in plain manifests; reference Secret objects.

## Deliverables
1. All manifests, organized clearly.
2. The apply/install commands and a rollback note.
3. A brief rationale for resource sizing and security choices.

Use production-grade defaults and explain notable trade-offs; ask only if blocked.