fix(vms): normalize comma spacing in unifi manifests — unblock the lint gate

The hand-authored UniFi VM manifests used column-aligned inline flow mappings
(`{ name: inform,   port: 8080,  protocol: TCP }`), which yamllint's `commas`
rule rejects as "too many spaces after comma". That made `make -C ci lint` FAIL,
so the merge gate has been BLOCKED on `main` since the UniFi commits landed —
every other static stage was green.

Collapse each run of spaces after a comma to one, and re-align the trailing
comments so the port tables stay readable. Whitespace only:
`kubectl kustomize apps/vms` renders byte-for-byte identically before and after.

The lint config is left untouched — relaxing the rule to make failing files pass
is moving the goalposts, not fixing the code.

Also refresh these files' stale `STAGING / DRAFT` headers: the tree is live,
reconciled by the non-gating `apps-vms` Flux Kustomization.

Gate after this change: spec-immutability / lint / l0 / l1 all green,
MERGE GATE: PASS.

Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>

apps/vms/unifi/30-virtualmachine.yaml

@@ -65,14 +65,14 @@ spec:
               # these and (b) surfaces them as containerPorts on the virt-launcher pod so the
               # LoadBalancer Services + CiliumNetworkPolicy ingress can target/match them.
               ports:
-                - { name: inform,   port: 8080,  protocol: TCP }   # device inform / adoption
-                - { name: ui-legacy, port: 8443, protocol: TCP }   # legacy Network UI (still served)
-                - { name: ui,       port: 11443, protocol: TCP }   # UOS web UI (modern default)
-                - { name: portal-http,  port: 8880, protocol: TCP } # guest portal HTTP
-                - { name: portal-https, port: 8843, protocol: TCP } # guest portal HTTPS
-                - { name: throughput,   port: 6789, protocol: TCP } # mobile speedtest / throughput
-                - { name: stun,     port: 3478,  protocol: UDP }   # STUN (device<->controller)
-                - { name: discovery, port: 10001, protocol: UDP }  # L2 device discovery
+                - { name: inform, port: 8080, protocol: TCP }         # device inform / adoption
+                - { name: ui-legacy, port: 8443, protocol: TCP }      # legacy Network UI (still served)
+                - { name: ui, port: 11443, protocol: TCP }            # UOS web UI (modern default)
+                - { name: portal-http, port: 8880, protocol: TCP }    # guest portal HTTP
+                - { name: portal-https, port: 8843, protocol: TCP }   # guest portal HTTPS
+                - { name: throughput, port: 6789, protocol: TCP }     # mobile speedtest / throughput
+                - { name: stun, port: 3478, protocol: UDP }           # STUN (device<->controller)
+                - { name: discovery, port: 10001, protocol: UDP }     # L2 device discovery
         resources:
           requests:
             memory: 4Gi