feat(renovate): Move namespace restricitons into kustomize component

apps/base/renovate/kustomization.yaml

@@ -7,4 +7,5 @@ resources:
   - release.yaml
 
 components:
-  - ../../../shared/components/flux-namespace-admin
+  - ../../../shared/components/flux-namespace-admin
\ No newline at end of file
+  - ../../../shared/components/namespace-baseline
\ No newline at end of file

apps/base/renovate/namespace.yaml

@@ -2,10 +2,3 @@ apiVersion: v1
 kind: Namespace
 metadata:
   name: renovate
-  labels:
-    pod-security.kubernetes.io/audit: restricted
-    pod-security.kubernetes.io/enforce: baseline
-    pod-security.kubernetes.io/warn: restricted
-    pod-security.kubernetes.io/audit-version: v1.26
-    pod-security.kubernetes.io/enforce-version: v1.23
-    pod-security.kubernetes.io/warn-version: v1.26

shared/components/namespace-baseline/kustomization.yaml

+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+patches:
+  - path: namespace.yaml
+    target:
+      kind: Namespace
\ No newline at end of file

shared/components/namespace-baseline/namespace.yaml

+- op: add
+  path: /metadata/labels
+  value: {}
+- op: add
+  path: /metadata/labels/pod-security.kubernetes.io~1audit
+  value: restricted
+- op: add
+  path: /metadata/labels/pod-security.kubernetes.io~1enforce
+  value: baseline
+- op: add
+  path: /metadata/labels/pod-security.kubernetes.io~1warn
+  value: restricted
+- op: add
+  path: /metadata/labels/pod-security.kubernetes.io~1audit-version
+  value: v1.28
+- op: add
+  path: /metadata/labels/pod-security.kubernetes.io~1enforce-version
+  value: v1.28
+- op: add
+  path: /metadata/labels/pod-security.kubernetes.io~1warn-version
+  value: v1.28