docs: update README with architecture and golden install notes

- Updated architecture diagram with platform components
- Added Golden Install Notes section
- Added Access section with ArgoCD URL
- Removed emoji from diagram labels

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

Author: justgithubaccount

README.md

@@ -48,18 +48,28 @@ task up
 
 ```mermaid
 flowchart TB
-    subgraph CLOUD["☁️ Timeweb Cloud"]
-        subgraph CLUSTER["🎯 Kubernetes Cluster"]
-            subgraph ARGOCD["🔄 ArgoCD"]
+    subgraph CLOUD["Timeweb Cloud"]
+        subgraph CLUSTER["Kubernetes Cluster"]
+            subgraph ARGOCD["ArgoCD"]
                 root[app-of-apps]
                 root --> platform
                 root --> tenants
-                root --> policies
+            end
+            subgraph PLATFORM["Platform"]
+                nginx[ingress-nginx]
+                cert[cert-manager]
+                dns[external-dns]
+                sealed[sealed-secrets]
+                longhorn[longhorn]
+                cnpg[cloudnative-pg]
+                loki[loki]
+                grafana[grafana]
+                otel[otel-collector]
             end
         end
     end
 
-    subgraph REPOS["📦 Git Repositories"]
+    subgraph REPOS["Git Repositories"]
         k8s[app-poly-gitops-k8s]
         helm[app-poly-gitops-helm]
         infra[app-poly-gitops-infra]
@@ -70,8 +80,6 @@ flowchart TB
     infra --> |"Bootstrap"| CLUSTER
 ```
 
-> See [docs/ARCHITECTURE.md](docs/ARCHITECTURE.md) for detailed diagrams
-
 ## Related Repositories
 
 | Repository | Purpose |
@@ -104,6 +112,20 @@ ArgoCD configuration is in `bootstrap/argocd/values.yaml`. After initial bootstr
 3. **GitOps**: `task app-of-apps` deploys root Application from app-poly-gitops-k8s
 4. **Self-managed**: ArgoCD now manages itself and all applications
 
+## Golden Install Notes
+
+При чистой установке с нуля:
+
+1. **ArgoCD Ingress** управляется через GitOps в `app-poly-gitops-k8s`, не через Helm chart
+2. **ArgoCD insecure mode** — сервер работает в HTTP режиме, ingress без `backend-protocol: HTTPS`
+3. **Cloudflare token** — ключ в секрете: `CF_API_TOKEN`
+4. **Sync Waves** — операторы (wave: 1) деплоятся раньше их CR (wave: 3+)
+
+## Access
+
+- **ArgoCD UI**: https://argo.syncjob.ru
+- **Admin password**: `task argocd-password`
+
 ## Cleanup
 
 ```bash