Scale to 3 replicas spread across physical hosts

- 3 replicas with pod anti-affinity on physical-host topology key
- Tolerate control-plane taint so pods can schedule on cp nodes

k8s/deployment.yaml

@@ -4,7 +4,7 @@ metadata:
   name: prop
   namespace: prop
 spec:
-  replicas: 1
+  replicas: 3
   minReadySeconds: 10
   strategy:
     type: RollingUpdate
@@ -19,6 +19,17 @@ spec:
       labels:
         app: prop
     spec:
+      tolerations:
+        - key: node-role.kubernetes.io/control-plane
+          operator: Exists
+          effect: NoSchedule
+      affinity:
+        podAntiAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            - labelSelector:
+                matchLabels:
+                  app: prop
+              topologyKey: topology.kubernetes.io/physical-host
       imagePullSecrets:
         - name: forgejo-registry
       securityContext: