feat: provision k8s namespace and secrets during customer setup

- k8s.ts: add createNamespace, deleteNamespace, createSecret, createDockerRegistrySecret
- customers.ts: create namespace + DOCR pull secret + app secrets (DATABASE_URL, JWT_SECRET, REDIS_URL) before pushing ArgoCD chart
- customers.ts: delete namespace on deprovision, search name field too
- git.ts: use DOCR OCI chart URL and helm parameters for customer ArgoCD apps
- Add 'namespace' and 'secrets' steps to provisioning step tracker

src/services/git.ts

@@ -54,16 +54,14 @@ metadata:
   namespace: argocd
 spec:
   project: default
-  sources:
-    - repoURL: git.lunarfront.tech/ryan/lunarfront-app
-      chart: lunarfront
-      targetRevision: "${appVersion}"
-      helm:
-        valueFiles:
-          - $values/customers/${slug}.yaml
-    - repoURL: ssh://git@git-ssh.lunarfront.tech/ryan/lunarfront-charts.git
-      targetRevision: main
-      ref: values
+  source:
+    repoURL: registry.digitalocean.com/lunarfront
+    chart: lunarfront
+    targetRevision: "${appVersion}"
+    helm:
+      parameters:
+        - name: ingress.host
+          value: ${slug}.lunarfront.app
   destination:
     server: https://kubernetes.default.svc
     namespace: customer-${slug}