feat(openshift-ingress): Switch to api token for Cloudflare

This patch replaces the existing apiKey, which has full account access
with an API token that is restricted to a single domain. This should
help to reduce the blast radius in case something goes south.