Moving FileBrowser to the Private Tier: HTTPS by Default, ClusterIP Only, and Authentication Back On

Overview

FileBrowser predates the tiers. It shipped in V3 as a Plex sidecar with its own LoadBalancer address, plain HTTP, and authentication off, guarded by nothing but a firewall rule. This appendix brings it home to the pattern from Private Tier HTTPS. It becomes a ClusterIP service, an Ingress served by the controller's default wildcard certificate, and its own login screen back on. The network rule that used to be the whole guardrail becomes one layer instead of the only one.