fix(clustertool): move spegel into its own namespace

clustertool/embed/generic/kubernetes/core/kyverno-policies/app/patch-gha.yaml

@@ -25,5 +25,5 @@ spec:
                   - dockerd
                   - --host=unix:///var/run/docker.sock
                   - --group=123
-                  - --registry-mirror=http://spegel-registry.kube-system.svc.cluster.local:5000
-                  - --insecure-registry=http://spegel-registry.kube-system.svc.cluster.local:5000
+                  - --registry-mirror=http://spegel-registry.spegel.svc.cluster.local:5000
+                  - --insecure-registry=http://spegel-registry.spegel.svc.cluster.local:5000

clustertool/embed/generic/kubernetes/system/spegel/app/helm-release.yaml

@@ -4,7 +4,7 @@ apiVersion: helm.toolkit.fluxcd.io/v2
 kind: HelmRelease
 metadata:
   name: spegel
-  namespace: kube-system
+  namespace: spegel
 spec:
   interval: 30m
   chart:

clustertool/embed/generic/kubernetes/system/spegel/app/namespace.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+    name: spegel
+    labels:
+        pod-security.kubernetes.io/enforce: privileged
+        topolvm.io/webhook: ignore