feat(helm): Add secret annotations

[al-cheb]

Description

Allow adding annotations to secret resources.

E.g.: A Kubernetes mutating webhook that makes direct secret injection using annotations - https://bank-vaults.dev/docs/mutating-webhook/annotations/

[dryrunsecurity]

DryRun Security Summary

Added Kubernetes Secret annotation support across Helm charts while introducing potential security risks related to annotation injection and metadata manipulation that require careful validation of input values.

Expand for full summary

The PR adds annotation support for Kubernetes Secrets across multiple Helm chart templates, allowing flexible metadata configuration for secret resources.

Security findings:

• Potential annotation injection vulnerability in multiple files (extra-secret.yaml, secret-postgresql-ha-pgpool.yaml, secret-postgresql-ha.yaml, secret-postgresql.yaml, secret-redis.yaml, secret.yaml)
• Risk of exposing sensitive information through unvalidated annotations
• Potential metadata manipulation through dynamically added annotations
• Requires careful validation of .Values.secrets.annotations and .Values.annotations to prevent information disclosure

Code Analysis

We ran 9 analyzers against 7 files and 0 analyzers had findings. 9 analyzers had no findings.

View PR in the DryRun Dashboard.

[kiblik]

Some small suggestions. But in general LGTM.

[mtesauro]

Approved