feat: Git sync - add first class support for CAs (#750)

* bump to op-rs 0.106.1 and k8s-openapi 0.27

* chore: Bump to stackable-operator 0.106.1

* wip: test

* generate secrets in job

* working test with proxy

* added negative test case

* update op-rs reference

* avoid cert name collision

* stabilise test

* added a docs note

* changelog

* change to tls class

* bump to op-rs 106.2

* updated docs

* removed comment

* reference tls field with webPki as default

* docs correction

* switch to unprivileged nginx so test runs on openshift

---------

Co-authored-by: Razvan-Daniel Mihai <84674+razvan@users.noreply.github.com>

Author: adwk67

CHANGELOG.md

@@ -4,6 +4,7 @@
 
 ### Added
 
+- Support for passing CAs to GitSync ([#750]).
 - Support setting `clientAuthenticationMethod` for OIDC authentication. The value is passed through to the Flask-AppBuilder config as `token_endpoint_auth_method` ([#765]).
 
 ### Changed
@@ -14,6 +15,7 @@
 
 - Do not use immutable Secret objects for internal secrets. Migrate existing secrets to mutable versions ([#770]).
 
+[#750]: https://github.com/stackabletech/airflow-operator/pull/750
 [#765]: https://github.com/stackabletech/airflow-operator/pull/765
 [#767]: https://github.com/stackabletech/airflow-operator/pull/767
 [#770]: https://github.com/stackabletech/airflow-operator/pull/770