fix: telegram webhook - HTTPRoute structure, kustomization, env var

- Fix HTTPRoute: merge backendRefs and matches into a single rule
  (was split across two rules, causing Telegram POSTs to be dropped)
- Add hermes-webhook.yaml to kustomization.yaml resources
  (was not applied during kustomize build at all)
- Clean up TELEGRAM_WEBHOOK_SECRET env var name (leading space)

apps/base/customer1/hermes-agent/kustomization.yaml

@@ -10,3 +10,4 @@ resources:
  # - hermes-service.yaml
   - new-deployment-rays.yaml
   - tele-webhook.yaml
+  - ../../../../infrastructure/gatewayapi/gateway-routes/hermes-webhook.yaml

infrastructure/gatewayapi/gateway-routes/hermes-webhook.yaml

@@ -10,10 +10,10 @@ spec:
   hostnames:
   - "ws.siriusdevops.com"
   rules:
-  - backendRefs:
-    - name: hermes-tele-webhook 
-      port: 8645 
   - matches:
     - path:
         type: PathPrefix
         value: /telegram/webhook
+    backendRefs:
+    - name: hermes-tele-webhook
+      port: 8645