support for pwd-protected registry and content trust

[joel-bluedata]

[joel-bluedata]

@kcsraju this is the umbrella/vague issue I mentioned.

For registry auth we probably need to add an imagePullSecret field in the kdapp role (and likely a top-level defaut too). That would then get stuffed into the pod template of the corresponding statefulset.