woodpecker: add ghp CI ServiceAccount

The ghp fork's .woodpecker pipelines run steps under serviceAccountName: ghp
(vet/test/docker-build gate + tag release image push). Add the ServiceAccount
in the woodpecker namespace so those pods can schedule.

apps/base/woodpecker/kustomization.yaml

@@ -8,6 +8,7 @@ resources:
   - cnpg_backup.yaml
   - cnpg_pooler.yaml
   - serviceaccount_autobackup_operator_ci.yaml
+  - serviceaccount_ghp.yaml
   - serviceaccount_kea_operator_ci.yaml
   - serviceaccount_jellyfin_ha_src.yaml
   - serviceaccount_terraform_artifactapi.yaml

apps/base/woodpecker/serviceaccount_ghp.yaml

@@ -0,0 +1,6 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: ghp
+  namespace: woodpecker