fix(sso-mfa): NK-WP-0003-T04 — correct privacyIDEA image and port

privacyidea/privacyidea:3.12 does not exist on Docker Hub.
Correct image: privacyidea/otpserver:3.12.2 (port 5001).

Updated files:
- deployment.yaml: image, containerPort, probes, service port
- ingress.yaml: backend service port
- netpol-mfa.yaml: ingress port + keycloak → keycape label
- netpol-sso.yaml: KeyCape egress port to privacyIDEA

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

sso-mfa/k8s/privacyidea/ingress.yaml

@@ -46,7 +46,7 @@ spec:
               service:
                 name: privacyidea
                 port:
-                  number: 8080
+                  number: 5001
   tls:
     - secretName: pink-tls
       hosts:
@@ -83,7 +83,7 @@ spec:
               service:
                 name: privacyidea
                 port:
-                  number: 8080
+                  number: 5001
   tls:
     - secretName: pink-tls
       hosts:
@@ -114,7 +114,7 @@ spec:
               service:
                 name: privacyidea
                 port:
-                  number: 8080
+                  number: 5001
   tls:
     - secretName: pink-account-tls
       hosts: