Fix service name resolution for OpenBao (release name collision)

When the ArgoCD release name is 'openbao' (same as the subchart name),
Helm's fullname helper collapses '<release>-<chart>' to just the release
name instead of appending '-openbao'. Our ClusterSecretStore and
bootstrap Job hardcoded the '<release>-openbao' form, which pointed at a
non-existent Service and made the ClusterSecretStore fail with
'unable to create client' / DNS lookup errors. Add a helper that
replicates the subchart's fullname logic.

Co-authored-by: Copilot <[email protected]>

templates/bootstrap-job.yaml

@@ -29,7 +29,7 @@ spec:
           image: {{ .Values.bootstrap.image }}
           env:
             - name: BAO_ADDR
-              value: "http://{{ .Release.Name }}-openbao:8200"
+              value: "http://{{ include "openbao-gitops.openbaoFullname" . }}:8200"
             - name: BAO_TOKEN
               valueFrom:
                 secretKeyRef: