REFACTOR(repo): move vault/ to manifests/

- Move ExternalSecret files from vault/ to manifests/secret.yaml
- Merge multiple secrets with --- separator (postgresql)
- Update kustomization.yaml references
- Remove vault/ folders

Apps: postgresql, postgresql-dev, pgweb, minio, velero

velero/manifests/secret.yaml

@@ -0,0 +1,53 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: velero-s3-credentials
+  namespace: velero
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault-backend
+  target:
+    name: velero-s3-credentials
+    creationPolicy: Owner
+    template:
+      type: Opaque
+      data:
+        cloud: |
+          [default]
+          aws_access_key_id={{ .minioAccessKey }}
+          aws_secret_access_key="{{ .minioSecretKey }}"
+  data:
+    - secretKey: minioAccessKey
+      remoteRef:
+        key: databases/minio
+        property: ROOT_USER
+    - secretKey: minioSecretKey
+      remoteRef:
+        key: databases/minio
+        property: ROOT_PASSWORD
+
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: velero-ui-secret
+  namespace: velero
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault-backend
+  target:
+    name: velero-ui-secret
+    creationPolicy: Owner
+  data:
+    - secretKey: username
+      remoteRef:
+        key: cluster-infrastructure/velero
+        property: UI_USERNAME
+    - secretKey: password
+      remoteRef:
+        key: cluster-infrastructure/velero
+        property: UI_PASSWORD