fix: add cloudflare-only middleware to webhook ingress

tmpl/cluster/flux-system/webhooks/github/ingress.yaml

@@ -8,6 +8,7 @@ metadata:
     cert-manager.io/cluster-issuer: "letsencrypt-production"
     external-dns/is-public: "true"
     external-dns.alpha.kubernetes.io/target: "ipv4.${SECRET_DOMAIN}"
+    traefik.ingress.kubernetes.io/router.middlewares: "networking-cloudflare-only@kubernetescrd"
 spec:
   ingressClassName: traefik
   rules: