admin-api-service: reverted to ClusterIP

- Admin API accessible via admin.apps.local through ingress
- LoadBalancer option kept in comment for future use
- Clean separation: web via apps.local, admin via admin.apps.local

k8s/admin-service.yaml

@@ -6,7 +6,8 @@ metadata:
   labels:
     app: admin-api
 spec:
-  type: ClusterIP
+  # type: LoadBalancer  # External access via IP
+  type: ClusterIP     # Internal access via DNS (via ingress)
   selector:
     app: admin-api
   ports: