Bundle emits KubeServiceAccountConfig with an empty issuer.issuerURL on a v1.14 contract #246

With templateOptions.talosVersion: v1.14.1 and a chart that emits the typed Kubernetes documents (the setup #241 is about), the bundle generates KubeServiceAccountConfig with issuer.issuerURL: "" while values.yaml::endpoint is set, and the node rejects the apply with:

KubeServiceAccountConfig: service issuer URL is required

talosctl gen config <name> <endpoint> --talos-version v1.14 fills the same field with the endpoint, so machinery has the value and talm is not passing it through.

talm 0.35.0, Talos v1.14.1.