refactor: update Vault secret paths to new categorized structure

- argocd: zot → storage/zot, github → platform/github, gitea → platform/gitea
- gitea-runner: gitea → platform/gitea, zot → storage/zot
- tekton: tekton → platform/tekton, zot → storage/zot

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

argocd/image-updater-manifests/image-updater-secret.yaml

@@ -19,11 +19,11 @@ spec:
   data:
     - secretKey: USERNAME
       remoteRef:
-        key: zot
+        key: storage/zot
         property: USERNAME
     - secretKey: PASSWORD
       remoteRef:
-        key: zot
+        key: storage/zot
         property: PASSWORD
 ---
 apiVersion: external-secrets.io/v1
@@ -42,11 +42,11 @@ spec:
   data:
     - secretKey: username
       remoteRef:
-        key: github
+        key: platform/github
         property: username
     - secretKey: password
       remoteRef:
-        key: github
+        key: platform/github
         property: password
 ---
 apiVersion: external-secrets.io/v1
@@ -74,9 +74,9 @@ spec:
   data:
     - secretKey: username
       remoteRef:
-        key: gitea
+        key: platform/gitea
         property: username
     - secretKey: password
       remoteRef:
-        key: gitea
+        key: platform/gitea
         property: password

gitea-runner/manifests/runner-secret.yaml

@@ -14,5 +14,5 @@ spec:
   data:
     - secretKey: token
       remoteRef:
-        key: gitea
+        key: platform/gitea
         property: runner_token

gitea-runner/manifests/zot-secret.yaml

@@ -19,9 +19,9 @@ spec:
   data:
     - secretKey: USERNAME
       remoteRef:
-        key: zot
+        key: storage/zot
         property: USERNAME
     - secretKey: PASSWORD
       remoteRef:
-        key: zot
+        key: storage/zot
         property: PASSWORD

tekton/ci-cd/manifests/secrets/zot-registry-secret.yaml

@@ -19,9 +19,9 @@ spec:
   data:
     - secretKey: USERNAME
       remoteRef:
-        key: zot
+        key: storage/zot
         property: USERNAME
     - secretKey: PASSWORD
       remoteRef:
-        key: zot
+        key: storage/zot
         property: PASSWORD

tekton/ci-cd/manifests/triggers/secret.yaml

@@ -14,5 +14,5 @@ spec:
   data:
     - secretKey: webhook-secret
       remoteRef:
-        key: tekton
+        key: platform/tekton
         property: GITEA_WEBHOOK_SECRET