feat: MetalLB + Traefik + wildcard DNS lab.local

- MetalLB pool 192.168.10.200-230 (L2 mode)
- Traefik LoadBalancer sur 192.168.10.200 (HTTP/HTTPS)
- dnsmasq wildcard *.lab.local → 192.168.10.200
- Fix Flannel CrashLoopBackOff : ClusterRoleBinding corrigée (kube-flannel → kube-system)
- Doc talos.md : procédure complète MetalLB + Traefik + pièges Flannel

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

ansible/roles/dnsmasq/defaults/main.yml

@@ -18,6 +18,8 @@ dhcp_static_hosts:
     name: compute-03
     ip: 192.168.10.13
 
+traefik_ip: 192.168.10.200
+
 dns_cluster_hosts:
   - name: storage-01
     ip: 192.168.10.1

ansible/roles/dnsmasq/templates/dnsmasq.conf.j2

@@ -23,6 +23,9 @@ address=/{{ host.name }}.{{ dns_domain }}/{{ host.ip }}
 address=/{{ host.name }}/{{ host.ip }}
 {% endfor %}
 
+# Wildcard *.lab.local → IP MetalLB Traefik (ingress)
+address=/.{{ dns_domain }}/{{ traefik_ip }}
+
 # DHCP — plage dynamique pour le LAN cluster
 dhcp-range={{ dhcp_range_start }},{{ dhcp_range_end }},{{ dhcp_lease_time }}
 dhcp-option=option:dns-server,{{ lan_ip }}