Fix degraded ArgoCD applications

- frigate: Remove duplicate PVCs (Helm manages them), update config size to 15Gi
- gitlab: Fix sync-admin-job secretKeyRef schema error, fetch password via kubectl
- nextcloud: Remove duplicate PVC, remove invalid pod-level securityContext
- rook-ceph: Update cephfs-smb-pvc to 50Gi, remove unsupported dashboard.config
- nessus: Add privileged PSS label for NET_ADMIN/NET_RAW capabilities
- scylla-manager: Add privileged PSS label for SYS_NICE capability
- n8n: Create missing n8n-main-persistence PVC
- projects: Add authentik namespace to applications project destinations

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

apps/nextcloud/manifests/pvc.yaml

@@ -1,19 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: nextcloud-nextcloud
-  namespace: nextcloud
-  labels:
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: nextcloud
-    app.kubernetes.io/instance: nextcloud
-  annotations:
-    meta.helm.sh/release-name: nextcloud
-    meta.helm.sh/release-namespace: nextcloud
-spec:
-  accessModes:
-    - ReadWriteOnce
-  storageClassName: rook-ceph-block      # Rook-Ceph block storage
-  resources:
-    requests:
-      storage: 50Gi                 # whatever size you want

apps/nextcloud/values.yaml

@@ -90,12 +90,6 @@ persistence:
    accessMode: ReadWriteOnce
    size: 50Gi
 
-securityContext:
-   allowPrivilegeEscalation: false
-   capabilities:
-     drop:
-       - ALL
-
 resources:
    requests:
      cpu: 50m