feat: migrate to S3 storage with automatic download and timestamped filenames

- Replace local file storage with S3-compatible object storage

- Add automatic PDF download after generation

- Include timestamps in filenames to ensure uniqueness

- Remove unused static volume from Kubernetes deployment

- Update ConfigMap to remove unused variables and add S3 configuration

- Configure S3 credentials via Kubernetes secrets for both dev and prod environments

- Add boto3 dependency for S3 integration

deploy/overlays/production/deployment-patch.yaml

@@ -8,7 +8,6 @@ metadata:
     # Security annotations
     seccomp.security.alpha.kubernetes.io/pod: docker/default
 spec:
-  replicas: 1
   template:
     spec:
       containers:

deploy/overlays/production/kustomization.yaml

@@ -22,4 +22,9 @@ images:
 # Production-specific labels
 commonLabels:
   environment: production
-  security-level: high
+  security-level: high
+
+secretGenerator:
+  - name: s3-credentials
+    envs:
+      - s3-credentials.env

deploy/overlays/production/security-patch.yaml

@@ -24,4 +24,8 @@ spec:
             drop:
               - ALL
             add:
-              - NET_BIND_SERVICE
+              - NET_BIND_SERVICE
+        # Environment variables from S3 credentials secret
+        envFrom:
+        - secretRef:
+            name: s3-credentials