Replace HelmRelease annotation approach with helm secret deletion.
Annotating HelmReleases with resource-policy=keep does not prevent
FluxCD from running helm uninstall when spec.chart changes to
spec.chartRef. Deleting helm release secrets ensures FluxCD has
nothing to uninstall and performs helm install instead, adopting
existing resources.
Update manual migration script with the same protection and fix
error handling for cozy-keycloak namespace check.
Signed-off-by: IvanHunters <xorokhotnikov@gmail.com>
d21373e780