fix(ingress): legacy NGF HTTP-01/ListenerSet + wildcard TLS, Gateway API v1.5.1, drop ACK ACM

- Gateway API CRDs default to v1.5.1; raise legacy control-plane resource defaults + min_replicas.
- Remove the ACK ACM controller + DNS-01 from the legacy NGF flavors (drop the module + output).
- legacy aws/azure/gcp flavors: DNS-01 (gts-production) cert issuance + wildcard TLS for private
  LBs (mirror k8s-native); drop the unsupported cluster_issuer_override fallback.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: sanmesh-kakade

intents/ack_acm_controller/facets.yaml

@@ -33,9 +33,11 @@ spec:
         - experimental
     version:
       type: string
-      default: v1.4.1
+      default: v1.5.1
       description: Gateway API version to install
       enum:
+        - v1.5.1
+        - v1.5.0
         - v1.4.1
         - v1.4.0
         - v1.3.0
@@ -47,4 +49,4 @@ sample:
   disabled: true
   spec:
     channel: experimental
-    version: v1.4.1
+    version: v1.5.1