fix(kanidm): prevent ArgoCD from overwriting repl-cert ConfigMap data

Remove the data keys from kanidm-repl-certs in git so ArgoCD never takes
SSA ownership of them. Add ignoreDifferences for /data on that ConfigMap
in the ApplicationSet template so ArgoCD doesn't flag sidecar-patched
cert values as out-of-sync.

apps/base/kanidm/configmap.yaml

@@ -37,7 +37,4 @@ metadata:
   labels:
     app.kubernetes.io/name: kanidm
     app.kubernetes.io/instance: kanidm
-data:
-  kanidm-0: ""
-  kanidm-1: ""
-  kanidm-2: ""
+data: {}