Add apps/base/repospawner with namespace, service account, job-spawning
RBAC, the server Deployment, oauth2-proxy front door, internal and
external gateways, and the VaultStaticSecrets backing them. Register the
overlay in the platform ApplicationSet and AppProject.
