feat(instance): IngressRoute uses tenants-default-retry + tighter readiness probe

templates/ingressroute.yaml

@@ -58,6 +58,13 @@ spec:
   routes:
     - match: Host(`{{ .Values.instance.domain }}`)
       kind: Rule
+      # Cluster-level middleware (defined in cluster-platform-v3,
+      # same `tenants` namespace as this IngressRoute). Adds a
+      # bounded retry budget so transient Pod-not-ready windows
+      # during an Odoo restart don't surface as Traefik's default
+      # 404 to the customer. TLS-related fields below are unchanged.
+      middlewares:
+        - name: tenants-default-retry
       services:
         - name: {{ include "instance.fullname" . }}-odoo
           port: 8069