fix: clone r10k config to /tmp/r10k-config instead of /shared

The g10k-code cronjob was failing with "Permission denied" because the
container (running as uid 999, non-root) attempted to create /shared in
the container root filesystem, which is not writable. Clone to /tmp
which is always writable by unprivileged users.

💘 Generated with Crush

Assisted-by: Claude Sonnet 4.6 via Crush <crush@charm.land>

apps/base/puppet/cronjob_g10k-code.yaml

@@ -44,9 +44,9 @@ spec:
                 - |
                   set -e
                   echo "Cloning r10k config repository..."
-                  git clone https://git.unkin.net/unkin/puppet-r10k.git /shared
+                  git clone https://git.unkin.net/unkin/puppet-r10k.git /tmp/r10k-config
                   echo "Running g10k..."
-                  /usr/bin/g10k -config /shared/r10k.yaml
+                  /usr/bin/g10k -config /tmp/r10k-config/r10k.yaml
               envFrom: null
               env: []
               securityContext: