feat(syncthing): Add PSS restricted securityContext

apps/k8s01/syncthing/syncthing.yaml

@@ -53,6 +53,17 @@ spec:
           httpGet:
             path: /rest/noauth/health 
             port: web
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+              - ALL
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 1000
+        runAsGroup: 1000
+        seccompProfile:
+          type: RuntimeDefault
   volumeClaimTemplates:
     - metadata:
         name: storage