This patch reworks how the infrastructure setup is organised to provide
more flexibility when maintaining multiple clusters with the same
repository as well as resolving various bootstrapping issues.

The new structure will move various overwrites into the cluster-specific
infrastructure directory, mimicking the apps directory. Currently it's
quite split between infrastructure and the cluster directory.

This patch refactors the entire ingress setup into two ingress classes:
internet and intranet. This allows to ensure that they use separate
services, reduces the attack surface and enables the usage of
external-dns.