fix(myorg-assistant): inject WEB_SECRET_KEY into all cronjobs

CronJob containers import src.config.Settings() at startup, which requires
WEB_SECRET_KEY. Only the Deployment set it; the 5 CronJobs (git-sync,
morning-briefing, evening-summary, waiting-followup, deadline-checker) crashed
at import with a pydantic ValidationError, causing restart loops (e.g.
myorg-git-sync ~5 restarts/15m). Pull WEB_SECRET_KEY from the existing
myorg-assistant-secret so the cronjobs start cleanly.

myorg-assistant/cronjobs/deadline-checker.yaml

@@ -34,26 +34,6 @@ spec:
             - "from src.scheduler.jobs import run_job; import sys; run_job(sys.argv[1])"
             - deadline-checker
             env:
-            - name: GIT_REPO_URL
-              valueFrom:
-                secretKeyRef:
-                  name: myorg-assistant-secret
-                  key: GIT_REPO_URL
-            - name: GIT_USERNAME
-              valueFrom:
-                secretKeyRef:
-                  name: myorg-assistant-secret
-                  key: GIT_USERNAME
-            - name: GIT_TOKEN
-              valueFrom:
-                secretKeyRef:
-                  name: myorg-assistant-secret
-                  key: GIT_TOKEN
-            - name: GIT_BRANCH
-              valueFrom:
-                configMapKeyRef:
-                  name: myorg-assistant-config
-                  key: GIT_BRANCH
             - name: MYORG_REPO_PATH
               valueFrom:
                 configMapKeyRef:

myorg-assistant/cronjobs/evening-summary.yaml

@@ -34,26 +34,6 @@ spec:
             - "from src.scheduler.jobs import run_job; import sys; run_job(sys.argv[1])"
             - evening-summary
             env:
-            - name: GIT_REPO_URL
-              valueFrom:
-                secretKeyRef:
-                  name: myorg-assistant-secret
-                  key: GIT_REPO_URL
-            - name: GIT_USERNAME
-              valueFrom:
-                secretKeyRef:
-                  name: myorg-assistant-secret
-                  key: GIT_USERNAME
-            - name: GIT_TOKEN
-              valueFrom:
-                secretKeyRef:
-                  name: myorg-assistant-secret
-                  key: GIT_TOKEN
-            - name: GIT_BRANCH
-              valueFrom:
-                configMapKeyRef:
-                  name: myorg-assistant-config
-                  key: GIT_BRANCH
             - name: MYORG_REPO_PATH
               valueFrom:
                 configMapKeyRef:

myorg-assistant/cronjobs/morning-briefing.yaml

@@ -35,26 +35,6 @@ spec:
             - morning-briefing
             env:
             # From ConfigMap
-            - name: GIT_REPO_URL
-              valueFrom:
-                secretKeyRef:
-                  name: myorg-assistant-secret
-                  key: GIT_REPO_URL
-            - name: GIT_USERNAME
-              valueFrom:
-                secretKeyRef:
-                  name: myorg-assistant-secret
-                  key: GIT_USERNAME
-            - name: GIT_TOKEN
-              valueFrom:
-                secretKeyRef:
-                  name: myorg-assistant-secret
-                  key: GIT_TOKEN
-            - name: GIT_BRANCH
-              valueFrom:
-                configMapKeyRef:
-                  name: myorg-assistant-config
-                  key: GIT_BRANCH
             - name: MYORG_REPO_PATH
               valueFrom:
                 configMapKeyRef:

myorg-assistant/cronjobs/waiting-followup.yaml

@@ -34,26 +34,6 @@ spec:
             - "from src.scheduler.jobs import run_job; import sys; run_job(sys.argv[1])"
             - waiting-followup
             env:
-            - name: GIT_REPO_URL
-              valueFrom:
-                secretKeyRef:
-                  name: myorg-assistant-secret
-                  key: GIT_REPO_URL
-            - name: GIT_USERNAME
-              valueFrom:
-                secretKeyRef:
-                  name: myorg-assistant-secret
-                  key: GIT_USERNAME
-            - name: GIT_TOKEN
-              valueFrom:
-                secretKeyRef:
-                  name: myorg-assistant-secret
-                  key: GIT_TOKEN
-            - name: GIT_BRANCH
-              valueFrom:
-                configMapKeyRef:
-                  name: myorg-assistant-config
-                  key: GIT_BRANCH
             - name: MYORG_REPO_PATH
               valueFrom:
                 configMapKeyRef: