feat: replace kubeadmin with CI service account token

- Remove OPENSHIFT_PASSWORD (kubeadmin no longer works with OAuth)
- Update OPENSHIFT_TOKEN with ci-deployer service account token
- Update OPENSHIFT_USERNAME to system:serviceaccount:openshift-gitops:ci-deployer
- Add OPENSHIFT_TOKEN to kustomize-cluster repo

Service account created in kustomize-cluster bootstrap.

Author: xnoto

main.tf

@@ -101,22 +101,13 @@ locals {
         "tfroot-github"
       ]
     }
-    "openshift_password" = {
-      name  = "OPENSHIFT_PASSWORD"
-      value = data.sops_file.secret_vars.data["openshift_password"]
-      repositories = [
-        "ansible-site-cluster",
-        "images",
-        "kustomize-cluster",
-        "tfroot-github"
-      ]
-    }
     "openshift_token" = {
       name  = "OPENSHIFT_TOKEN"
       value = data.sops_file.secret_vars.data["openshift_token"]
       repositories = [
         "ansible-site-cluster",
         "images",
+        "kustomize-cluster",
         "tfroot-github"
       ]
     }