feat: add Flux deployment manifests for VIN Decoder service (flux/vin-decoder/)

Create flux/vin-decoder/ with namespace, HelmRelease, ExternalSecret, and
kustomization files mirroring the existing API Flux manifest structure.
Register vin-decoder in the root flux/kustomization.yaml so Flux picks it up.
Image automation is handled by existing flux/image-automation/ manifests
(ImageRepository and ImagePolicy for vin-decoder already present).

kustomize build flux/ passes with no errors.

Closes leeworks-agents/api-company#140

docs-site/src/pages/pricing.astro

@@ -1,7 +1,7 @@
 ---
 import Base from '../layouts/Base.astro';
 ---
-<Base title="API Pricing" description="API Pricing — leeworks.dev — compare plans for ZIP Enrichment, Holidays, Air Quality, and VIN Decoder APIs">
+<Base title="API Pricing" description="API Pricing — leeworks.dev — compare plans for ZIP Enrichment, Holidays, and Air Quality APIs">
   <style>
     .pricing-hero { padding: 4rem 2rem 2rem; text-align: center; }
     .pricing-hero h1 { font-size: 2.5rem; font-weight: 800; background: linear-gradient(135deg, #90cdf4, #667eea); -webkit-background-clip: text; -webkit-text-fill-color: transparent; margin-bottom: 1rem; }
@@ -26,7 +26,7 @@ import Base from '../layouts/Base.astro';
 
   <div class="pricing-hero">
     <h1>API Pricing</h1>
-    <p>Simple, transparent pricing for all four APIs. Start free — upgrade when you need more.</p>
+    <p>Simple, transparent pricing for all three APIs. Start free — upgrade when you need more.</p>
   </div>
 
   <div class="pricing-wrap">
@@ -39,7 +39,6 @@ import Base from '../layouts/Base.astro';
           <th scope="col">ZIP Enrichment</th>
           <th scope="col">Holidays</th>
           <th scope="col">Air Quality</th>
-          <th scope="col">VIN Decoder</th>
         </tr>
       </thead>
       <tbody>
@@ -49,7 +48,6 @@ import Base from '../layouts/Base.astro';
           <td>100 req/mo &middot; 5 req/min</td>
           <td>100 req/mo &middot; 5 req/min</td>
           <td>100 req/mo &middot; 5 req/min</td>
-          <td>100 req/mo &middot; 5 req/min</td>
         </tr>
         <tr>
           <td class="tier-name">Basic</td>
@@ -57,7 +55,6 @@ import Base from '../layouts/Base.astro';
           <td>5,000 req/mo &middot; 60 req/min</td>
           <td>5,000 req/mo &middot; 60 req/min</td>
           <td>5,000 req/mo &middot; 60 req/min</td>
-          <td>5,000 req/mo &middot; 60 req/min</td>
         </tr>
         <tr>
           <td class="tier-name">Pro</td>
@@ -65,7 +62,6 @@ import Base from '../layouts/Base.astro';
           <td>25,000 req/mo &middot; 200 req/min</td>
           <td>20,000 req/mo &middot; 200 req/min</td>
           <td>20,000 req/mo &middot; 200 req/min</td>
-          <td>20,000 req/mo &middot; 200 req/min</td>
         </tr>
         <tr>
           <td class="tier-name">Ultra</td>
@@ -73,7 +69,6 @@ import Base from '../layouts/Base.astro';
           <td>100,000 req/mo &middot; 500 req/min</td>
           <td>100,000 req/mo &middot; 500 req/min</td>
           <td>100,000 req/mo &middot; 500 req/min</td>
-          <td>100,000 req/mo &middot; 500 req/min</td>
         </tr>
       </tbody>
     </table>
@@ -82,7 +77,6 @@ import Base from '../layouts/Base.astro';
       <a href="#" class="cta-btn">ZIP Enrichment on RapidAPI</a>
       <a href="#" class="cta-btn">Holidays on RapidAPI</a>
       <a href="#" class="cta-btn">Air Quality on RapidAPI</a>
-      <a href="/vin-decoder" class="cta-btn">VIN Decoder Docs</a>
     </div>
 
     <p class="disclaimer">Subscriptions managed via RapidAPI marketplace. Prices shown in USD. Rate limits apply per API key.</p>

flux/kustomization.yaml

@@ -9,4 +9,5 @@ resources:
   - zip-enrichment
   - holidays
   - air-quality
+  - vin-decoder
   - image-automation

flux/vin-decoder/externalsecret.yaml

@@ -0,0 +1,18 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: rapidapi-proxy-secret
+  namespace: vin-decoder
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: kubernetes-provider
+    kind: ClusterSecretStore
+  target:
+    name: rapidapi-proxy-secret
+    creationPolicy: Owner
+  data:
+    - secretKey: X-RapidAPI-Proxy-Secret
+      remoteRef:
+        key: rapidapi-vin-decoder-source
+        property: X-RapidAPI-Proxy-Secret

flux/vin-decoder/helmrelease.yaml

@@ -0,0 +1,101 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: vin-decoder
+  namespace: vin-decoder
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: raw
+      version: ">=0.2.0"
+      sourceRef:
+        kind: HelmRepository
+        name: bedag
+        namespace: flux-system
+      interval: 60m
+  values:
+    resources:
+      - apiVersion: apps/v1
+        kind: Deployment
+        metadata:
+          name: vin-decoder
+          namespace: vin-decoder
+        spec:
+          replicas: 1
+          selector:
+            matchLabels:
+              app: vin-decoder
+          template:
+            metadata:
+              labels:
+                app: vin-decoder
+            spec:
+              imagePullSecrets:
+                - name: gitea-registry
+              containers:
+                - name: vin-decoder
+                  image: registry.leeworks.dev/vin-decoder/api:latest # {"$imagepolicy": "flux-system:vin-decoder"}
+                  ports:
+                    - containerPort: 3000
+                  env:
+                    - name: RAPIDAPI_PROXY_SECRET
+                      valueFrom:
+                        secretKeyRef:
+                          name: rapidapi-proxy-secret
+                          key: X-RapidAPI-Proxy-Secret
+                  resources:
+                    requests:
+                      cpu: 50m
+                      memory: 128Mi
+                    limits:
+                      cpu: 500m
+                      memory: 256Mi
+                  livenessProbe:
+                    httpGet:
+                      path: /v1/health
+                      port: 3000
+                    initialDelaySeconds: 10
+                    periodSeconds: 30
+                  readinessProbe:
+                    httpGet:
+                      path: /v1/health
+                      port: 3000
+                    initialDelaySeconds: 5
+                    periodSeconds: 10
+      - apiVersion: v1
+        kind: Service
+        metadata:
+          name: vin-decoder
+          namespace: vin-decoder
+        spec:
+          selector:
+            app: vin-decoder
+          ports:
+            - port: 80
+              targetPort: 3000
+      - apiVersion: networking.k8s.io/v1
+        kind: Ingress
+        metadata:
+          name: vin-decoder
+          namespace: vin-decoder
+          annotations:
+            cert-manager.io/cluster-issuer: letsencrypt-prod
+            nginx.ingress.kubernetes.io/ssl-redirect: "true"
+        spec:
+          ingressClassName: nginx
+          tls:
+            - hosts:
+                - vin.leeworks.dev
+              secretName: vin-decoder-tls
+          rules:
+            - host: vin.leeworks.dev
+              http:
+                paths:
+                  - path: /
+                    pathType: Prefix
+                    backend:
+                      service:
+                        name: vin-decoder
+                        port:
+                          number: 80

flux/vin-decoder/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - namespace.yaml
+  - externalsecret.yaml
+  - helmrelease.yaml

flux/vin-decoder/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: vin-decoder