refactor(.woodpecker.yml): move traefik to no-op provision case (Pattern B), remove TRAEFIK_KEEPALIVED_PASSWORD env var

.woodpecker.yml

@@ -57,8 +57,6 @@ steps:
         from_secret: productivity_db_password
       PRODUCTIVITY_OIDC_PROVIDERS:
         from_secret: productivity_oidc_providers
-      TRAEFIK_KEEPALIVED_PASSWORD:
-        from_secret: traefik_keepalived_password
       VAULTWARDEN_ADMIN_TOKEN:
         from_secret: vaultwarden_admin_token
       VAULTWARDEN_DATABASE_URL:
@@ -115,7 +113,7 @@ steps:
           STACK=$(basename "$f" .yaml)
           echo "Provisioning: $STACK"
           case "$STACK" in
-            maintenance|media|unifi|guacamole|security|auth)
+            maintenance|media|unifi|guacamole|security|auth|traefik)
               echo "  No Docker secrets for $STACK — secrets in host .env";;
             woodpecker)
               echo "  Manual only - skipping";;
@@ -149,9 +147,6 @@ steps:
               ssh -o StrictHostKeyChecking=no root@${SWARM_MANAGER_IP} "source /tmp/cs.sh
                 create_or_update_secret 'postgresql_password'         '${POSTGRESQL_PASSWORD}'
                 create_or_update_secret 'postgresql_pgadmin_password' '${POSTGRESQL_PGADMIN_PASSWORD}'";;
-            traefik)
-              ssh -o StrictHostKeyChecking=no root@${SWARM_MANAGER_IP} "source /tmp/cs.sh
-                create_or_update_secret 'traefik_keepalived_password' '${TRAEFIK_KEEPALIVED_PASSWORD}'";;
             productivity)
               ssh -o StrictHostKeyChecking=no root@${SWARM_MANAGER_IP} "source /tmp/cs.sh
                 create_or_update_secret 'productivity_paperless_secret_key' '${PRODUCTIVITY_PAPERLESS_SECRET_KEY}'