Split unbound into its own app directory

unbound was bundled inside apps/pihole/ and invisible in the apps/
listing. Now apps/unbound/ (deployment + service + kustomization); it
stays in the pihole namespace, whose Namespace object remains owned by
apps/pihole. No resource changes — server-side dry-run clean (36
resources).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

apps/pihole/deployment-unbound.yaml

@@ -1,54 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: unbound
-  namespace: pihole
-  labels:
-    app: unbound
-spec:
-  replicas: 3
-  selector:
-    matchLabels:
-      app: unbound
-  strategy:
-    type: RollingUpdate
-    rollingUpdate:
-      maxSurge: 25%
-      maxUnavailable: 25%
-  template:
-    metadata:
-      labels:
-        app: unbound
-    spec:
-      affinity:
-        nodeAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-            - weight: 1
-              preference:
-                matchExpressions:
-                  - key: cpu
-                    operator: In
-                    values:
-                      - arm
-                  - key: model
-                    operator: In
-                    values:
-                      - raspi
-      containers:
-        - name: unbound
-          image: docker.io/mvance/unbound-rpi:latest
-          imagePullPolicy: Always
-          ports:
-            - name: svc-53-udp
-              containerPort: 53
-              protocol: UDP
-            - name: svc-53-tcp
-              containerPort: 53
-              protocol: TCP
-          resources:
-            requests:
-              cpu: 250m
-              memory: 50Mi
-            limits:
-              cpu: "1"
-              memory: 1Gi

apps/pihole/kustomization.yaml

@@ -6,5 +6,4 @@ resources:
   - namespace.yaml
   - storage.yaml
   - deployment-pihole.yaml
-  - deployment-unbound.yaml
   - service.yaml

apps/pihole/service.yaml

@@ -32,22 +32,3 @@ spec:
       targetPort: 67
       nodePort: 31025
       protocol: UDP
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: unbound-service
-  namespace: pihole
-spec:
-  type: ClusterIP
-  selector:
-    app: unbound
-  ports:
-    - name: udp-53
-      port: 53
-      targetPort: 53
-      protocol: UDP
-    - name: tcp-53
-      port: 53
-      targetPort: 53
-      protocol: TCP