fix: telegram webhook - HTTPRoute structure, kustomization, env var

- Fix HTTPRoute: merge backendRefs and matches into a single rule
  (was split across two rules, causing Telegram POSTs to be dropped)
- Add hermes-webhook.yaml to kustomization.yaml resources
  (was not applied during kustomize build at all)
- Clean up TELEGRAM_WEBHOOK_SECRET env var name (leading space)

apps/base/customer1/hermes-agent/kustomization.yaml

@@ -10,3 +10,4 @@ resources:
  # - hermes-service.yaml
   - new-deployment-rays.yaml
   - tele-webhook.yaml
+  - ../../../../infrastructure/gatewayapi/gateway-routes/hermes-webhook.yaml

apps/base/customer1/hermes-agent/new-deployment.yaml

@@ -98,7 +98,7 @@ spec:
         - name: TELEGRAM_WEBHOOK_URL
           value: "https://ws.siriusdevops.com/telegram/webhook/default"  
         
-        - name:  TELEGRAM_WEBHOOK_SECRET 
+        - name: TELEGRAM_WEBHOOK_SECRET
           valueFrom:
             secretKeyRef:
               name: telegram-webhook

infrastructure/gatewayapi/gateway-routes/hermes-webhook.yaml

@@ -10,10 +10,10 @@ spec:
   hostnames:
   - "ws.siriusdevops.com"
   rules:
-  - backendRefs:
+  - matches:
+    - path:
+        type: PathPrefix
+        value: /telegram/webhook
+    backendRefs:
     - name: hermes-tele-webhook
       port: 8645
-  - matches:
-      - path:
-          type: PathPrefix
-          value: /telegram/webhook