REFACTOR(goldilocks): use managedNsMeta for Goldil

- Remove namespace.yaml files
- Add managedNamespaceMetadata with Goldilocks label
- Set CreateNamespace=true in syncOptions
- Update kustomization.yaml to remove namespace.yaml references

gitea/kustomization.yaml

@@ -1,15 +1,10 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-
 resources:
-  - namespace.yaml
-
-  - deployment.yaml
-
-  - vault/gitea-admin-secret.yaml
-  - vault/gitea-postgres-password.yaml
-  - vault/gitea-runner-token.yaml
-  - vault/gitea-minio-credentials.yaml
-  - vault/minio-root-password.yaml
-
+- deployment.yaml
+- vault/gitea-admin-secret.yaml
+- vault/gitea-postgres-password.yaml
+- vault/gitea-runner-token.yaml
+- vault/gitea-minio-credentials.yaml
+- vault/minio-root-password.yaml
 namespace: gitea