Add shared Infisical auth layer (InfisicalConnection + InfisicalAuth)

Phase 2: GitOps-managed shared auth layer in infisical-operator ns —
InfisicalConnection (https://infisical.chemavx.xyz) + InfisicalAuth
(kubernetes method, operator SA via TokenReview) + identity-ID Secret
(non-secret UUID; auth is via SA token, so safe in git). To be referenced
cross-namespace by per-app InfisicalStaticSecret CRs later. No real secret yet.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

argocd/application-infisical-config.yaml

@@ -0,0 +1,18 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: infisical-config
+  namespace: argocd
+spec:
+  destination:
+    namespace: infisical-operator
+    server: https://kubernetes.default.svc
+  project: default
+  source:
+    path: infisical-config
+    repoURL: https://git.chemavx.xyz/chemavx/k8s-manifests
+    targetRevision: main
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true