Cloudflare: Migrate ops.gitlab.net (Phase 1)

1. We will turn off rate limiting in HAProxy
   • This is not applicable on ops :)
2. Change the authoritative DNS to Cloudflare (arya.ns.cloudflare.com and hal.ns.cloudflare.com for our zones) Link to gitlab.com in the route53 registry
   • This causes the production Spectrum app to get traffic. Cloudflare should be a fancy proxy at this point, as we have disabled most content related features above.
3. Allow 24 hours before continuing and/or doing any DNS changes, except for any corrective actions and/or a rollback. In any case the changes should be applied to both Route53 and Cloudflare via Terraform (if applicable).

~"workflow::Blocked" because of dependencies