fix(jellyfin): Add basics to move towards PSS restricted

apps/k8s01/jellyfin/deployment.yaml

@@ -67,7 +67,12 @@ spec:
             amd.com/gpu: 1
             memory: 3.5Gi
             cpu: "4"
+        securityContext:
+          allowPrivilegeEscalation: false
       restartPolicy: Always
+      securityContext:
+        seccompProfile:
+          type: "RuntimeDefault"
       volumes:
       - name: movies
         persistentVolumeClaim: