add woodpecker pipeline to reconcile flux

vault/approles/ci-flux-reconcile.yaml

@@ -0,0 +1,4 @@
+token_ttl: 20m
+token_max_ttl: 20m
+policies:
+  - flux-reconcile

vault/kubernetes-se-roles/flux-reconcile.yaml

@@ -1,6 +1,6 @@
 allowed_kubernetes_namespaces: flux-system
 generated_role_rules:
   rules:
-    - apiGroups: ["kustomize.toolkit.fluxcd.io"]
+    - apiGroups: ["source.toolkit.fluxcd.io"]
       resources: ["gitrepositories"]
-      verbs: ["update", "watch"]
+      verbs: ["get", "patch", "watch"]

vault/policy/flux-reconcile.hcl

@@ -0,0 +1,3 @@
+path "kubernetes/creds/flux-reconcile" {
+    capabilities = ["update"]
+}