Add role-based filtering and imporve code

Tiltfile

@@ -142,6 +142,25 @@ k8s_resource('demo-session-db', labels=['databases'])
 k8s_resource('redis', labels=['infrastructure'])
 k8s_resource('rabbitmq', labels=['infrastructure'])
 
+# Nominatim geocoding service (excluded in dev via kustomize patches)
+# Uncomment these if you want to test nominatim locally
+# k8s_resource('nominatim',
+#     resource_deps=['nominatim-init'],
+#     labels=['infrastructure'])
+# k8s_resource('nominatim-init',
+#     labels=['data-init'])
+
+# Monitoring stack
+#k8s_resource('prometheus',
+#    labels=['monitoring'])
+
+#k8s_resource('grafana',
+#    resource_deps=['prometheus'],
+#    labels=['monitoring'])
+
+#k8s_resource('jaeger',
+#    labels=['monitoring'])
+
 # Migration jobs depend on databases
 k8s_resource('auth-migration', resource_deps=['auth-db'], labels=['migrations'])
 k8s_resource('tenant-migration', resource_deps=['tenant-db'], labels=['migrations'])