feat(ql3): add opt-in security administration job

deploy/kubernetes/ql3-cluster/operations/security-administration/input-secret.example.yaml

@@ -0,0 +1,14 @@
+# Example only. Create a private per-dispatch Secret; never commit real values.
+apiVersion: v1
+kind: Secret
+metadata:
+  name: ql3-security-administration-input
+  namespace: qinglong3-system
+type: Opaque
+immutable: true
+stringData:
+  command.json: |
+    {"schemaVersion":1,"operation":"audit.list","request":{"limit":25,"filter":{"outcome":"allowed"}}}
+  assertion.jwt: REPLACE_WITH_SHORT_LIVED_MULTI_FACTOR_ASSERTION
+  keyset.json: REPLACE_WITH_PINNED_SECURITY_ADMINISTRATION_KEYSET
+  pepper: REPLACE_WITH_CANONICAL_32_BYTE_BASE64URL_API_CREDENTIAL_PEPPER