v0.2.3 sorts all render inputs so named.conf is byte-identical across
reconciles. Without it the config-hash (v0.2.2) flips every reconcile as
cache-ordered forward zones reshuffle, rolling the resolver StatefulSet
forever.
- Bump the operator image and the pulled CRD bundle to v0.2.3.
- Bump the bind-tsig-api image to v0.2.3.
CRDs are unchanged from v0.2.2, so the generated schemas need no update.