(feat) Standardise and Harden default app securitycontext (#1028)

* Apply security hardened defaults to values.yaml for all apps

* Add default common securityContext to all apps

* Adjust securityContext defaults in questions.yaml, according to values.yaml

* Add default common podSecurityContext to all apps

* Clean whitespace

* Clean more whitespace

* Adjust podSecurityContext defaults in questions.yaml, according to values.yaml

* fix pgadmin

Co-authored-by: Stavros kois <s.kois@outlook.com>

charts/stable/nextcloud/values.yaml

@@ -5,12 +5,14 @@ image:
   pullPolicy: IfNotPresent
   tag: 22.1.1@sha256:99d94124b2024c9f7f38dc12144a92bc0d68d110bcfd374169ebb7e8df0adf8e
 
+securityContext:
+  readOnlyRootFilesystem: false
+  runAsNonRoot: false
+
 podSecurityContext:
   runAsUser: 0
   runAsGroup: 0
   fsGroup: 33
-  supplementalGroups: []
-  fsGroupChangePolicy: "OnRootMismatch"
 
 postgresqlImage:
   repository: bitnami/postgresql
@@ -148,7 +150,6 @@ probes:
       timeoutSeconds: 2
       failureThreshold: 5
 
-
 ## Cronjob to execute Nextcloud background tasks
 ## ref: https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/background_jobs_configuration.html#webcron
 ##