test: replace weak literal connectors password with secretKeyRef in multitenancy scenario

[eamonnmoloney]

Which problem does the PR fix?

Fixes the failing kemt (keycloak-mt) scenario in the merge queue for #6463.

The GKE CI cluster enforces a ValidatingAdmissionPolicy (deny-weak-password-defaults) that rejects any Deployment where a password-named env var is set to a known default or a value shorter than 12 characters. The multitenancy scenario values set connectors.env[].name: password, value: password, which triggers the policy and causes Helm install to fail immediately with:

deployments.apps "integration-connectors" is forbidden: ValidatingAdmissionPolicy
'deny-weak-password-defaults' with binding 'deny-weak-password-defaults' denied request:
container(s) connectors set a password env var to a weak literal value

What's in this PR?

Replace the literal value: password with a secretKeyRef pointing to the integration-test-credentials secret (already provisioned in every integration test namespace via External Secrets). The password key in that secret holds a strong, Vault-managed password.

Applied to all five affected chart versions: 8.6, 8.7, 8.8, 8.9, 8.10.

Checklist

Before opening the PR:

• In the repo's root dir, run make go.update-golden-only.
• There is no other open pull request for the same update/change.
• Tests for charts are added (if needed).
• In-repo documentation are updated (if needed).

After opening the PR:

• Did you sign our CLA (Contributor License Agreement)? It will show once you open the PR.
• Did all checks/tests pass in the PR?

[Copilot]

Pull request overview

Updates the multitenancy integration-test scenario values to avoid GKE admission rejection (deny-weak-password-defaults) by replacing a weak literal password env var value with a valueFrom.secretKeyRef pointing to the existing integration-test-credentials Secret. This is applied consistently across chart versions 8.6–8.10.

Changes:

• Replace connectors.env literal value: password with valueFrom.secretKeyRef (integration-test-credentials / password).
• Apply the same change across all affected chart versions (8.6, 8.7, 8.8, 8.9, 8.10).

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
charts/camunda-platform-8.6/test/integration/scenarios/chart-full-setup/values/features/multitenancy.yaml	Switch connectors password env var to Secret-backed valueFrom for the 8.6 scenario.
charts/camunda-platform-8.7/test/integration/scenarios/chart-full-setup/values/features/multitenancy.yaml	Switch connectors password env var to Secret-backed valueFrom for the 8.7 scenario.
charts/camunda-platform-8.8/test/integration/scenarios/chart-full-setup/values/features/multitenancy.yaml	Switch connectors password env var to Secret-backed valueFrom for the 8.8 scenario.
charts/camunda-platform-8.9/test/integration/scenarios/chart-full-setup/values/features/multitenancy.yaml	Switch connectors password env var to Secret-backed valueFrom for the 8.9 scenario.
charts/camunda-platform-8.10/test/integration/scenarios/chart-full-setup/values/features/multitenancy.yaml	Switch connectors password env var to Secret-backed valueFrom for the 8.10 scenario.