vault: install netbox and apptoken OpenBao plugin RPMs on bao nodes

terraform-vault #115 registers vault-plugin-secrets-netbox in the plugin
catalog, but OpenBao only registers a plugin whose binary is physically
present in plugin_directory (/opt/openbao-plugins); the netbox RPM is
published on rpm-internal but not yet installed, so #115 fails to register
until Puppet lays the binary down. The apptoken engine's binary is likewise
published but missing from the bao package list, deferred from its earlier
deploy follow-up.

- Add openbao-plugin-secrets-netbox (0.1.0) to the bao node package list
- Add openbao-plugin-secrets-apptoken (0.1.0) to the bao node package list

hieradata/roles/infra/storage/vault.yaml

@@ -40,3 +40,7 @@ profiles::packages::include:
     ensure: '0.1.1'
   openbao-plugin-secrets-gitea:
     ensure: '0.1.0'
+  openbao-plugin-secrets-apptoken:
+    ensure: '0.1.0'
+  openbao-plugin-secrets-netbox:
+    ensure: '0.1.0'