vault: prefer rpi5 for injector

infrastructure/vault-injector/helmrelease.yaml

@@ -45,8 +45,25 @@ spec:
         nodeAffinity:
           preferredDuringSchedulingIgnoredDuringExecution:
             - weight: 100
+              preference:
+                matchExpressions:
+                  - key: hardware
+                    operator: In
+                    values: ["rpi5"]
+            - weight: 95
               preference:
                 matchExpressions:
                   - key: kubernetes.io/hostname
                     operator: NotIn
-                    values: ["titan-13", "titan-15", "titan-17", "titan-19"]
+                    values: ["titan-13", "titan-14", "titan-15", "titan-17", "titan-18", "titan-19"]
+            - weight: 80
+              preference:
+                matchExpressions:
+                  - key: atlas.bstein.dev/spillover
+                    operator: DoesNotExist
+            - weight: 40
+              preference:
+                matchExpressions:
+                  - key: hardware
+                    operator: In
+                    values: ["rpi4"]