[cern] enable tls in traefik ingress
Change traefik configuration to explicit declare the endpoints, and include an additional TLS endpoint on port 443.
Drop -d as an option in traefik (debug), explicitly setting the logLevel for easier change if required by users.
Rename --web (deprecated) to --api.
Fixes OS-6287.