feat: CNPG PodMonitor, OpenBao ServiceMonitor, CLI OIDC client CRD

- CNPG PodMonitor for PostgreSQL cluster metrics
- OpenBao ServiceMonitor for vault metrics scraping
- Sunbeam CLI OAuth2Client CRD (moved from seed to declarative)

base/ory/oidc-client-cli.yaml

@@ -0,0 +1,26 @@
+apiVersion: hydra.ory.sh/v1alpha1
+kind: OAuth2Client
+metadata:
+  name: sunbeam-cli
+  namespace: ory
+spec:
+  clientName: Sunbeam CLI
+  grantTypes:
+    - authorization_code
+    - refresh_token
+  responseTypes:
+    - code
+  scope: openid email profile offline_access
+  tokenEndpointAuthMethod: none
+  redirectUris:
+    - http://localhost:9876/callback
+    - http://localhost:9877/callback
+    - http://localhost:9878/callback
+    - http://localhost:9879/callback
+    - http://localhost:9880/callback
+    - http://127.0.0.1:9876/callback
+    - http://127.0.0.1:9877/callback
+    - http://127.0.0.1:9878/callback
+    - http://127.0.0.1:9879/callback
+    - http://127.0.0.1:9880/callback
+  secretName: oidc-sunbeam-cli