chore: tidy initContainers

- make initcontainers easier to read/follow

apps/base/puppet/deployment_puppetdb.yaml

@@ -84,12 +84,8 @@ spec:
           command:
             - sh
             - -c
+          args:
             - mkdir -p /opt/puppetlabs/server/data/puppetdb/logs && chown 999:999 /opt/puppetlabs/server/data/puppetdb/logs
-          volumeMounts:
-            - mountPath: /opt/puppetlabs/server/data/puppetdb
-              name: puppetdb-storage
-          securityContext:
-            runAsUser: 0
           resources:
             limits:
               cpu: 20m
@@ -97,18 +93,25 @@ spec:
             requests:
               cpu: 20m
               memory: 32Mi
-        - command:
+          securityContext:
+            runAsUser: 0
+          volumeMounts:
+            - mountPath: /opt/puppetlabs/server/data/puppetdb
+              name: puppetdb-storage
+
+        - name: pgchecker
+          image: docker.io/busybox:1.37
+          imagePullPolicy: IfNotPresent
+          command:
             - sh
             - -c
+          args:
             - |
               echo 'Waiting for PostgreSQL to become ready...'
               until printf "." && nc -z -w 2 puppet-postgres-pooler 5432; do
                   sleep 2;
               done;
               echo 'PostgreSQL OK ✓'
-          image: docker.io/busybox:1.37
-          imagePullPolicy: IfNotPresent
-          name: pgchecker
           resources:
             limits:
               cpu: 20m
@@ -117,22 +120,24 @@ spec:
               cpu: 20m
               memory: 32Mi
           securityContext:
-            allowPrivilegeEscalation: false
+            runAsUser: 1000
             runAsGroup: 1000
             runAsNonRoot: true
-            runAsUser: 1000
-        - command:
+            allowPrivilegeEscalation: false
+
+        - name: wait-puppetserver
+          image: curlimages/curl:8.11.1
+          imagePullPolicy: IfNotPresent
+          command:
             - sh
             - -c
+          args:
             - |
               echo 'Waiting for puppetserver to become ready...'
               until printf "." && curl --silent --fail --insecure 'https://puppetca:8140/status/v1/simple' | grep -q '^running$'; do
                 sleep 2;
               done;
               echo 'Puppetserver OK ✓'
-          image: curlimages/curl:8.11.1
-          imagePullPolicy: IfNotPresent
-          name: wait-puppetserver
           resources:
             limits:
               cpu: 20m
@@ -141,10 +146,10 @@ spec:
               cpu: 20m
               memory: 32Mi
           securityContext:
-            allowPrivilegeEscalation: false
+            runAsUser: 1000
             runAsGroup: 1000
             runAsNonRoot: true
-            runAsUser: 1000
+            allowPrivilegeEscalation: false
       volumes:
         - name: puppetdb-storage
           persistentVolumeClaim: