fix(vertical-pod-autoscaler): explicitly set `podSecurityContext.runAsGroup`

[Gacko]

This PR explicitly sets the runAsGroup of the VPA components.

According to the Kubernetes API reference the runAsGroup defaults to the runtime default if not set. In reality this might be the runAsUser ID, but it doesn't have to.