cephrgw v0.4.0; move CNPG backup buckets to ec placement (#312)

cephrgw-operator v0.4.0 adds immutable placementTarget selection on Buckets; the nine CNPG backup buckets should live on the ec (4/1) placement instead of 3-replica. Existing buckets cannot change placement, so after this merges the buckets get deleted and recreated on ec and fresh base backups are triggered (day-old backups are accepted losses, per Ben).

- bump cephrgw-operator image and CRD ref to v0.4.0
- add placementTarget: ec to all nine cnpg backup Bucket CRs

Reviewed-on: #312
Co-authored-by: Ben Vincent <ben@unkin.net>
Co-committed-by: Ben Vincent <ben@unkin.net>

apps/base/authentik/cnpg_backup.yaml

@@ -26,6 +26,7 @@ metadata:
   name: cnpg-authentik
   namespace: authentik
 spec:
+  placementTarget: ec
   bucketName: cnpg-authentik
   # The owner user has full control of its own bucket (read + write), which is
   # all the backup/restore identity needs — no extra BucketAccess grant.