Allows admins to create services and jobs, in the namespace of their choice, to accomodate exposure of own platform tooling.

* chore(deps): upgraded prom operator, knative, istio
* chore(deps): upgraded nginx, olm
* feat: harbor added to kubeapps
* feat: isMultitenant default false
* feat: harbor default disabled
* fix: blackbox multitenancy
* feat: keycloak now shared with teams for account access
* feat: allow keycloak backchannel requests
* feat: mapped .minikube folder for deployment on minikube with provider 'local'
* fix: storageclasses only deployed for major clouds (so not for 'custom' or 'local')
* feat: added compatibility for k8s 1.22 (1.23 and 1.24 possibly also working ok)
* fix: server must decrypt before any other op
* fix: added gen-sops phase to server commit
* fix: gitea untrusted ca not needed for production
* feat: values migration with markers, fully allowing automatic migration of values when schema changes are found
* fix: harbor ingress for chartrepo
* test: add migration test
* fix: removed last logo from core

BREAKING CHANGE: upgraded app dbs, so...

Implements FQDN and IP address filtering for external egress network traffic

* feat: host modifications to insert ca
* fix: vulnerable images
* chore(deps): updated charts

BREAKING CHANGE: 🧨 New CLI Introduced

After too many painful dev cycles with bash scripting we decided to rewrite the CLI. Since we are a typescript oriented team and focusing mostly on configuration of 3rd party apps we decided to use typescript all the way.

Most notable features:
- built using github.com/google/zx: Google's zx approach offers us as a nice way to wrap our tooling.
- improved handling of input parameters using yargs
- granular colorized debug output: using familiar levels such as log (always printed to stdout), debug, info, warn, error (always printed to stderr)
- command autocompletion
- improved tracing of code
- friendly installer: will ask where to install, wether to install autocompletion scripts
- auto upgrade: the user will basked to upgrade if a new version exists
- improved readability, testability and maintainability

Conftest can be run as part of the 'otomi validate-policies' command, which will check defined
policy files from 'policies' folder against generated manifests.

* feat: add modularization for policies and constraint templates
* feat: add extended Konstraint library for unified rego file syntax
Co-authored-by: Maurice Faber <maurice.faber@redkubes.com>

refactor: alertmanager receivers

refactor: no-keycloak now correctly handled, cleaned upi

* feat: define otomi mode

* chore: add words to spellcheck

* fix: demo values

* improvement: enrich cert-manager schema

* improvement: enrich cert-manager schema