Add security context for crdHook to enable security policy compliance

[qlevasseur-genetec]

Adds crdHook.containerSecurityContext option to configure container security context for the CRD installation job, enabling compliance with security policies (e.g., Kyverno).

Changes

• values.yaml: Added crdHook.containerSecurityContext configuration option
• templates/hooks/crd-install-job.yaml: Template now applies the security context to the container
• values.schema.json: Added missing crdHook section with all its properties

Example usage

  crdHook:
    containerSecurityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
          - ALL
      runAsNonRoot: true
      seccompProfile:
        type: RuntimeDefault