refactor(infra): update Traefik configuration references and remove obsolete traefik.yaml

ARCHITECTURE.md

@@ -53,7 +53,7 @@ asepharyana-hub/
 
 Traefik runs as the entry point for all HTTP/S traffic. It is configured via:
 
-- **Static config**: `infra/traefik/traefik.yaml` — entry points, providers, plugins
+- **Static config**: CLI arguments in `infra/compose/traefik.yml` — entry points, providers, plugins
 - **Dynamic config**: `infra/traefik/dynamic/` — routers, services, middlewares, TLS
 - **Docker provider**: Auto-discovers containers with `traefik.enable=true` labels
 - **File provider**: Loads `apps.yaml` (routers/services), `middlewares.yaml`, `ssl.yaml`

infra/README.md

@@ -15,11 +15,10 @@ infra/
 ├── docker/                  # Dockerfiles and image runtime helpers
 ├── dapr/                    # Dapr component configs
 │   ├── config.yaml          # Global Dapr configuration
-│   └── components/          # Pub/sub (NATS), state store (Redis)
-├── traefik/                 # Static and dynamic Traefik configuration
+│   └── components/          # Pub/sub (Redis), state store (Redis)
+├── traefik/                 # Dynamic Traefik configuration
 │   ├── dynamic/             # Routers, services, middlewares, TLS certs
 │   └── TRAEFIK_ENV_CONFIG.md
-└── config/                  # Service bootstrap configuration
 ```
 
 ## First-time setup

infra/traefik/traefik.yaml

@@ -1,29 +0,0 @@
-api:
-  dashboard: true
-  insecure: false
-
-log:
-  level: INFO
-  format: json
-
-accessLog: {}
-
-entryPoints:
-  web:
-    address: ':80'
-    http:
-      redirections:
-        entryPoint:
-          to: websecure
-          scheme: https
-  websecure:
-    address: ':443'
-
-providers:
-  docker:
-    endpoint: 'unix:///var/run/docker.sock'
-    exposedByDefault: false
-    network: app-shared-net
-  file:
-    directory: /etc/traefik/dynamic
-    watch: true