feat: Add OPA TLS integration and test

[adwk67]

Description

Fixes #534

Definition of Done Checklist

• Not all of these items are applicable to all PRs, the author should update this template to only leave the boxes in that are relevant
• Please make sure all these things are done and tick the boxes

Author

• Changes are OpenShift compatible
• CRD changes approved
• CRD documentation for all fields, following the style guide.
• Helm chart can be installed and deployed operator works
• Integration tests passed (for non trivial changes)
• Changes need to be "offline" compatible
• Links to generated (nightly) docs added
• Release note snippet added

Reviewer

• Code contains useful comments
• Code contains useful logging statements
• (Integration-)Test cases added
• Documentation added or updated. Follows the style guide.
• Changelog updated
• Cargo.toml only contains references to git tags (not specific commits or branches)

Acceptance

• Feature Tracker has been updated
• Proper release label has been added
• Links to generated (nightly) docs added
• Release note snippet added
• Add type/deprecation label & add to the deprecation schedule
• Add type/experimental label & add to the experimental features tracker

[adwk67]

Jenkins 🟢 https://testing.stackable.tech/view/02%20Operator%20Tests%20(custom)/job/kafka-operator-it-custom/76/

[dervoeti]

Nice, just a few nits.

Also: As far as I see it the integration test currently does not validate whether an action is denied by OPA, only that sending/receiving messages succeed. Maybe we should test some action that would be denied? Because currently, at least in theory, the test would also succeed if the OPA config is ignored for some reason and all actions are allowed by default.

[adwk67]

I've extended the test to filter on topic names so that we can also test that there is no access to a disallowed topic:

--- PASS: kuttl (111.42s)
    --- PASS: kuttl/harness (0.00s)
        --- PASS: kuttl/harness/opa_kafka-latest-3.9.1_zookeeper-latest-3.9.4_opa-latest-1.8.0_use-opa-tls-false_openshift-false_krb5-1.21.1 (101.45s)
        --- PASS: kuttl/harness/opa_kafka-latest-3.9.1_zookeeper-latest-3.9.4_opa-latest-1.8.0_use-opa-tls-true_openshift-false_krb5-1.21.1 (110.51s)
PASS