chore(renovate): two clastix/kubectl pins sit outside the files Renovate reads #5300

Renovate does not update the clastix/kubectl image in two places, so those pins age without anyone noticing. The only manager that tracks this image is a custom regex in .github/renovate.json, and its managerFilePatterns covers packages/.+/templates/hooks/.+\.yaml only.

• packages/system/etcd-operator/values.yaml pins kubectlImage by tag and digest under a # renovate: datasource=docker depName=docker.io/clastix/kubectl comment. No manager reads that comment: helm-values is not in enabledManagers, and the regex manager does not look at values files.
• packages/system/keycloak-configure/templates/delete.yaml uses docker.io/clastix/kubectl:v1.32 with no digest, and the file is not under templates/hooks/.

Widening the regex manager to these two files, and adding a digest to the keycloak-configure reference so the existing match string applies, would put them under the same update as the hook pins. The values file keeps tag and digest in separate keys, so it needs its own match string.

#4010 is the same gap for the alpine/k8s references.