fix(myorg-assistant): fix cronjob images to use gitea registry + imagePullSecrets

Cronjob pods were stuck in ImagePullBackOff because they referenced bare
image name 'myorg-assistant:latest' (no registry, no pull secret).
Updated all 5 cronjobs to use git.rogi.casa/roger/myorg-assistant/myorg-assistant:fcf79bf
matching the Deployment, added gitea-registry imagePullSecrets, and set
imagePullPolicy: Always for consistency.

argocd/argocd-rbac-cm.yaml

@@ -1,20 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: argocd-rbac-cm
-  namespace: argocd
-  labels:
-    app.kubernetes.io/name: argocd-rbac-cm
-    app.kubernetes.io/part-of: argocd
-data:
-  # Default policy: readonly for all authenticated users
-  policy.default: role:readonly
-
-  # platform-engineer account: read all apps + trigger syncs
-  policy.csv: |
-    p, role:platform-engineer, applications, get, */*, allow
-    p, role:platform-engineer, applications, sync, */*, allow
-    p, role:platform-engineer, clusters, get, *, allow
-    p, role:platform-engineer, repositories, get, *, allow
-    p, role:platform-engineer, projects, get, *, allow
-    g, platform-engineer, role:platform-engineer