Generalize Ingress creation, use wildcard cert with OCP apps domain

[ThisIsntTheWay]

Summary

• Generalize ingress creation logic
• Create separate ingresses that bundle FQDNs in the following way:
  • FQDN is part of an OCP clusters default apps domain and only has one subdomain (sub1.apps...)
  • FQDN is either not part of said domain or has 2 or more subdomains (sub2.sub1.apps...)
    • Bundled ingresses will have "letsencrypt" or "wildcard" added to their name according to their TLS config
  • Services that only have one FQDN will only create a single ingress with no extra name according to those rules
• Use wildcard certs for the ingress bundling eligible FQDNs (empty TLS config)

Given an apps domain example.com:

❯ k get ing -o custom-columns="NAME:.metadata.name,HOSTS:.spec.rules[*].host"
NAME                               HOSTS
nextcloud-collabora-code-ingress   k-collabora.example.com
nextcloud-letsencrypt-ingress      next.nextcloud.example.com,past.nextcloud.example.com,presentcloud.my-domain.ch,nextcloud.my-domain.ch,future.tensecloud.my-domain.ch
nextcloud-wildcard-ingress         nextcloud.example.com,2-nextcloud.example.com

❯ k get ing nextcloud-letsencrypt-ingress  -o yaml | yq .spec.tls
- hosts:
    - next.nextcloud.example.com
    - past.nextcloud.example.com
    - presentcloud.my-domain.ch
    - nextcloud.my-domain.ch
    - future.tensecloud.my-domain.ch
  secretName: nextcloud-ingress-cert

❯ k get ing nextcloud-wildcard-ingress -o yaml | yq .spec.tls
- {}

This affects the following services:

• Nextcloud
• Keycloak
• Collabora
• Forgejo

Related PR in component-appcat: vshn/component-appcat#623

Checklist

• Categorize the PR by setting a good title and adding one of the labels:
  bug, enhancement, documentation, change, breaking, dependency
  as they show up in the changelog
• Update tests.

[zugao]

This PR will touch existing services. Make sure you check the crossplane-diff of this change.

[Kidswiss]

LGTM

[zugao]

LGTM

[ThisIsntTheWay]

Thanks for the approval, will merge once I got to verify the diff (unless you guys have been able to do that already)