lasuite: declarative pre-work for La Suite app deployments

- Add find user and find_db to postgres-cluster.yaml (11th database)
- Add sunbeam-messages-imports and sunbeam-people buckets to SeaweedFS
- Configure Hydra Maester with enabledNamespaces: [lasuite] so it can
  create and update OAuth2Client secrets in the lasuite namespace
- Add find to Kratos allowed_return_urls
- Add shared ConfigMaps: lasuite-postgres, lasuite-valkey, lasuite-s3,
  lasuite-oidc-provider — single source of truth for all app env vars
- Add HydraOAuth2Client CRDs for all nine La Suite apps (docs, drive,
  meet, conversations, messages, people, find, gitea, hive); Maester
  will create oidc-<app> secrets with CLIENT_ID and CLIENT_SECRET

base/lasuite/seaweedfs-buckets.yaml

@@ -26,7 +26,9 @@ spec:
                 sunbeam-meet \
                 sunbeam-drive \
                 sunbeam-messages \
+                sunbeam-messages-imports \
                 sunbeam-conversations \
+                sunbeam-people \
                 sunbeam-git-lfs \
                 sunbeam-game-assets; do
                 mc mb --ignore-existing "weed/$bucket"