refactor: update Vault secret paths to new categorized structure

- minio: minio → storage/minio, minio-s3-credentials → storage/minio-s3-credentials
- pgweb: pgweb → storage/pgweb
- postgresql: postgresql → storage/postgresql
- velero: minio → storage/minio, velero → storage/velero
- zot: zot → storage/zot

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

zot/manifests/secret.yaml

@@ -14,7 +14,7 @@ spec:
   data:
   - secretKey: htpasswd
     remoteRef:
-      key: zot
+      key: storage/zot
       property: HTPASSWD
 ---
 apiVersion: external-secrets.io/v1
@@ -41,11 +41,11 @@ spec:
   data:
   - secretKey: client_id
     remoteRef:
-      key: zot
+      key: storage/zot
       property: OIDC_CLIENT_ID
   - secretKey: client_secret
     remoteRef:
-      key: zot
+      key: storage/zot
       property: OIDC_CLIENT_SECRET
 ---
 apiVersion: external-secrets.io/v1
@@ -72,9 +72,9 @@ spec:
   data:
   - secretKey: hashKey
     remoteRef:
-      key: zot
+      key: storage/zot
       property: SESSION_HASH_KEY
   - secretKey: encryptKey
     remoteRef:
-      key: zot
+      key: storage/zot
       property: SESSION_BLOCK_KEY