This patch reverts the changes to immich to upgrade to 1.96.0. The
pgvecto.rs upgrade turned out to be too complicated, it might be worth
to rebuild the immich setup using pg_vector or drop immich entirely.

From the current point of view pgvecto.rs is too immature and too
involved to maintain in a private setup using standard components like
postgresql clusters using zalando postgres operator.

This patch refactors the entire ingress setup into two ingress classes:
internet and intranet. This allows to ensure that they use separate
services, reduces the attack surface and enables the usage of
external-dns.