Add OpenSearch application with operator and resource definition:
- App chart with multi-version support (v1/v2/v3), TLS, auth, dashboards
- OpenSearch operator wrapper (opster v2.8.0) with sysctl daemonset
- ApplicationDefinition for Cozystack platform integration

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Signed-off-by: Matthieu <matthieu@hidora.com>

Add operator and application PackageSource CRs to expose OpenSearch
in the Cozystack platform:
- opensearch-operator: operator deployment in cozy-opensearch-operator namespace
- opensearch-application: app + resource definition with cozy-lib integration

This enables OpenSearch to appear in the platform dashboard and be
deployed by tenants.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
Signed-off-by: Matthieu <matthieu@hidora.com>

Address CodeRabbit review feedback:
- Fix extraEnv indentation (nindent 8 → 10) in controller-manager deployment
- Fix imagePullSecrets indentation (nindent 6 → 8) for proper YAML alignment
- Change proxy-rolebinding from conditional RoleBinding to always ClusterRoleBinding
  (required for cluster-scoped tokenreviews/subjectaccessreviews permissions)
- Pin operator chart version to 2.8.0 in Makefile for reproducible builds

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
Signed-off-by: Matthieu <matthieu@hidora.com>

Address CodeRabbit nitpick feedback:
- Fix inconsistent indentation in opensearch-application.yaml (4 spaces → 2 spaces)
  to match opensearch-operator.yaml style
- Add missing space in controller-manager-deployment.yaml template
  (nindent 8}} → nindent 8 }}) for consistency

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
Signed-off-by: Matthieu <matthieu@hidora.com>

Remove sysctl DaemonSet in favor of operator's built-in setVMMaxMapCount
init container, fix schema conflicts with required+empty default, fix
update-versions.sh YAML output format, and use $(MAKE) in Makefile.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Matthieu <matthieu@hidora.com>

The required fields in schema are auto-generated by cozyvalues-gen
and must be kept in sync.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Matthieu <matthieu@hidora.com>

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Matthieu <matthieu@hidora.com>