fix(platform): allow tailscale namespace in NetworkPolicy for proxy access

Tailscale proxy pods run in the tailscale namespace, so the existing
customer1-only namespaceSelector blocked proxy → dashboard traffic.

apps/base/customer1/trading-platform/network-policies/trading-network-policies.yaml

@@ -33,6 +33,22 @@ spec:
           protocol: TCP
         - port: 8003
           protocol: TCP
+    # Allow from Tailscale proxy namespace
+    - from:
+        - namespaceSelector:
+            matchLabels:
+              kubernetes.io/metadata.name: tailscale
+      ports:
+        - port: 3000
+          protocol: TCP
+        - port: 8000
+          protocol: TCP
+        - port: 8001
+          protocol: TCP
+        - port: 8002
+          protocol: TCP
+        - port: 8003
+          protocol: TCP
     # Allow inter-service communication
     - from:
         - podSelector: