feat: MetalLB + Traefik + wildcard DNS lab.local

- MetalLB pool 192.168.10.200-230 (L2 mode)
- Traefik LoadBalancer sur 192.168.10.200 (HTTP/HTTPS)
- dnsmasq wildcard *.lab.local → 192.168.10.200
- Fix Flannel CrashLoopBackOff : ClusterRoleBinding corrigée (kube-flannel → kube-system)
- Doc talos.md : procédure complète MetalLB + Traefik + pièges Flannel

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

ansible/roles/dnsmasq/defaults/main.yml

@@ -18,6 +18,8 @@ dhcp_static_hosts:
     name: compute-03
     ip: 192.168.10.13
 
+traefik_ip: 192.168.10.200
+
 dns_cluster_hosts:
   - name: storage-01
     ip: 192.168.10.1