[ipa] fix kube-rbac-proxy image pull failure

The idm-operator-controller-manager pod has a kube-rbac-proxy
sidecar container that references gcr.io/kubebuilder/kube-rbac-
proxy:v0.5.0. This image is no longer available on gcr.io
(Google Container Registry is being deprecated), causing
ErrImagePull/ImagePullBackOff and preventing the Deployment
from becoming Available.

Replace with registry.k8s.io/kubebuilder/kube-rbac-proxy:v0.16.0
which is the current canonical location.

Assisted-by: Claude Opus 4 (Anthropic)
Change-Id: Idcbff92540f1e6b02463d1a704a80ed3906465e5
Signed-off-by: Grzegorz Grasza <xek@redhat.com>

Author: xek

roles/ipa/tasks/run_ipa_setup.yml

@@ -65,6 +65,7 @@
       oc create -f config/rbac/scc.yaml
       (cd config/default && kustomize edit set namespace "{{ cifmw_ipa_namespace }}")
       (cd config/manager && kustomize edit set image controller=quay.io/freeipa/freeipa-operator:nightly)
+      (cd config/default && kustomize edit set image gcr.io/kubebuilder/kube-rbac-proxy=registry.k8s.io/kubebuilder/kube-rbac-proxy:v0.16.0)
       kustomize build config/default | kubectl apply -f -
 
 - name: Wait for it to be deployed