fix: add constraints for ES and Basic auth in noSecondaryStorage mode

[abremard]

Which problem does the PR fix?

The Helm chart continues to enable Elasticsearch, even though the no-db flag global.noSecondaryStorage=true is set. Output:

- Console:
  - Enabled: false
- Orchestration:
  - Enabled: true
  - Docker Image used for Zeebe: camunda/camunda:8.8.0-alpha8
  - Zeebe Cluster Name: "my-camunda-devel-zeebe"
  - Prometheus ServiceMonitor Enabled: false
- Connectors:
  - Enabled: true
  - Docker Image used for Connectors: camunda/connectors-bundle:8.8.0-alpha8
- Identity:
  - Enabled: false
- Web Modeler:
  - Enabled: false
- Elasticsearch:
  - Enabled: true
  - Docker Image used for Elasticsearch: bitnamilegacy/elasticsearch:8.18.0

We still need to configure OIDC authentication with "no-secondary-storage" mode as Basic authentication is not supported.
There is some bad UX in the Helm chart, as users only discover this limitation when inspecting logs of crash-looping Zeebe Brokers. Example:

ERROR - io.camunda.application - Failed to start application with message: Error creating bean with name 'basicAuthenticationNoDbFailFastBean' defined in class path resource [io/camunda/authentication/config/WebSecurityConfig$BasicAuthenticationNoDbConfiguration.class]: Failed to instantiate [io.camunda.authentication.config.WebSecurityConfig$BasicAuthenticationNoDbFailFastBean]: Factory method 'basicAuthenticationNoDbFailFastBean' threw exception with message: Basic Authentication is not supported when secondary storage is disabled (
camunda.database.type=none). Basic Authentication requires access to user data stored in secondary storage.
Please either enable secondary storage by configuring camunda.database.type to a supported database type,
or use another authentication method by updating the camunda.security.authentication.method configuration. 

What's in this PR?

I'm adding 2 new constraints

• on Basic Auth : we should warn users trying to deploy noSecondaryStorage mode with basic auth, it's not supported
• on elasticsearch.enable : this should be false when noSecondaryStorage is true (this config is different from globale.elasticsearch.enable)

Checklist

Please make sure to follow our Contributing Guide.

Before opening the PR:

• In the repo's root dir, run make go.update-golden-only.
• There is no other open pull request for the same update/change.
• Tests for charts are added (if needed).
• In-repo documentation are updated (if needed).

After opening the PR:

• Did you sign our CLA (Contributor License Agreement)? It will show once you open the PR.
• Did all checks/tests pass in the PR?

#closes camunda/camunda#38186

[eamonnmoloney]

@abremard This one broke the unit tests. Can you have a look?

[hisImminence]

@abremard This one broke the unit tests. Can you have a look?

Just to update - no need anymore @abremard - Unit test was fixed now by #4223.