feat(trait): enforce Pod and Container security context

[squakez]

This PR introduce a default value for both Pod and Container Security Context in order to strengthen the security on the cluster and avoid possible privilege escalations. Note that we still must set runAsNonRoot value as false by default as we are building container to run with root user. We will work on a follow up issue to remove such a constraint and set this default as true when we are ready.

The resulting Pod executed (whichever is the controller strategy) will be like the following:

spec:
  containers:
  - args:
    - echo exec java -cp ...
    image: 10.100.107.57/default/camel-k-kit-costpl3m17ss73c14n40@sha256:42965134843fe61db6ac1ebf965d28f33a22b5159e10c48ed64f112e34b78442
    imagePullPolicy: IfNotPresent
    name: integration
    ...
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
      runAsNonRoot: false
      seccompProfile:
        type: RuntimeDefault
...
  securityContext:
    runAsNonRoot: false
    seccompProfile:
      type: RuntimeDefault
  serviceAccount: default
...

The default configuration is enriched automatically in Openshift cluster which are already enforcing these policies with the addition of a default runAsUser value.

Release Note

feat(trait): Pod and Container security context 

[oscerd]

Thanks for this, this is super important.

[squakez]

Checks failure due to #5459 and #5474