This patch adds the ability to the restrict oauth access to certain
roles. These roles have to be available in an attribute of the profile
info.

This also upgrades to 1.9.9

This patch adds the unreleased healthcheck path as well as setting
hedgedoc up for PSS of restricted.

This patch reworks parts of the helm chart, to always include boolean
values with their default instead of using a `with` clause. Since the
`with` clause works like an `if`, it would not explicitly decleare a
`false` value due to evaluating to false and therefore not being
considered for content evaluation.

This patch allows to deploy TLS support for the database backend.

If one doesn't render the subchart, it's not very surprising that it
might doesn't create the correct secrets.