Enforce storageclasses for kubevirt-csi-driver

[kvaps]

Currently someone with access to the cluster just pick a different backing storage class by changing it?

This should be fixed by specifying storageClassEnforcement in kubevirt-csi-controller.

https://github.com/kubevirt/csi-driver/blob/35836e0c8b68d9916d29a838ea60cdd3fc6199cf/docs/snapshot-driver-config.md?plain=1#L40-L43

This should specified in

https://github.com/aenix-io/cozystack/blob/111e9a582d6b6fa42aab27785925910792511049/packages/apps/kubernetes/templates/csi/deploy.yaml#L52-L57