notes/uralkal: own env with in-cluster addresses

The overlay inherited base env copied from SaaS prod: DJANGO_HOST
https://lk.sarex.io, workspaces/workflows on api.sarex.io and PG_SSL_MODE
verify-full. From the closed contour every request to django failed with
CERTIFICATE_VERIFY_FAILED. Point django, workspaces and workflows at their
uralkal services, attachments at its real port 8000, disable postgres SSL
(the uralkal server has none). FAAS_SERVICE and RESOURCE_URL stay as in base:
neither service exists in uralkal.

apps/notes/uralkal/backend.yaml

@@ -13,3 +13,52 @@ spec:
             requests:
               cpu: null
               memory: null
+
+        envs:
+          - name: PG_SSL_MODE
+            value:
+              _default: "disable"
+
+          - name: DJANGO_HOST
+            value:
+              _default: "http://backend-svc.django.svc.cluster.local"
+
+          - name: BASE_HOST
+            value:
+              _default: "https://sarex.local.uralkali.com/notes"
+
+          - name: TIMEOUT
+            value:
+              _default: "120"
+
+          - name: FAAS_SERVICE
+            value:
+              _default: "https://api.sarex.io/lambdas"
+
+          - name: WORKSPACE_URL
+            value:
+              _default: "http://backend-svc.workspaces.svc.cluster.local/api/v1"
+
+          - name: WORKFLOW_HOST
+            value:
+              _default: "http://backend-svc.processing.svc.cluster.local/api/v1"
+
+          - name: WORKFLOW_TAG
+            value:
+              _default: "stable"
+
+          - name: RESOURCE_URL
+            value:
+              _default: "https://api.sarex.io/resources/api/v1"
+
+          - name: SYNC_RESOURCE_ID
+            value:
+              _default: "0"
+
+          - name: ENABLE_ND
+            value:
+              _default: "0"
+
+          - name: ATTACHMENT_HOST
+            value:
+              _default: "http://attachments-service.attachments.svc.cluster.local:8000/api/v1"