Add ArgoCD Applications for External Secrets Operator and OpenBao

- external-secrets: deployed directly from its official Helm repo with
  installCRDs enabled.
- openbao: deployed from the new openbao-gitops repo, providing the
  ClusterSecretStore that binds ESO to OpenBao.

Also extends templates/application.yaml to support Helm-repo sources
(source.chart) in addition to git path-based sources, and raw Helm
values blocks.

Co-authored-by: Copilot <[email protected]>

templates/application.yaml

@@ -12,8 +12,12 @@ spec:
   source:
     repoURL: {{ .source.repoURL }}
     targetRevision: {{ .source.targetRevision }}
+    {{- if .source.chart }}
+    chart: {{ .source.chart }}
+    {{- else }}
     path: {{ .source.path }}
-    {{- if or (and .source.helm .source.helm.parameters) (and .source.helm .source.helm.valueFiles) }}
+    {{- end }}
+    {{- if or (and .source.helm .source.helm.parameters) (and .source.helm .source.helm.valueFiles) (and .source.helm .source.helm.values) }}
     helm:
       {{- if .source.helm.parameters }}
       parameters:
@@ -23,6 +27,10 @@ spec:
       valueFiles:
         {{- toYaml .source.helm.valueFiles | nindent 8 }}
       {{- end }}
+      {{- if .source.helm.values }}
+      values: |
+        {{- .source.helm.values | nindent 8 }}
+      {{- end }}
     {{- end }}
   destination:
     server: {{ .destination.server }}