tvk-quickstart: OCP compatibility — all 6 backup modes passing (21 fixes)

[rodolof]

Summary

21 fixes to make `kubectl tvk-quickstart` work end-to-end on OpenShift Container Platform (OCP) with TVK 5.3.1 installed via OLM. All fixes are gated behind `open_flag` (detected via OCP CRD probe) and are fully backward-compatible with vanilla Kubernetes.

Test Results

backup_way	Application	Result
Namespace_based	WordPress + MySQL	✅ PASS
VM_TEST	KubeVirt Fedora VM	✅ PASS
Transformation	PostgreSQL + StorageClass change	✅ PASS
Label_based	MySQL	✅ PASS
Helm_based	kube-prometheus-stack	✅ PASS
Operator_based	Datagrid / Infinispan via OLM	✅ PASS

Key Changes

• OLM install path — TVK installed via Subscription/CSV/InstallPlan instead of Helm
• SCC grants — anyuid + cluster-admin for TVK and backup namespace service accounts
• Ingress — OCP Route instead of nginx ingress
• Helm OCI replaced — `helm repo add prometheus-community` instead of `oci://ghcr.io/...`
• Prometheus CRDs — `--skip-crds` to avoid conflict with CVO-owned CRDs
• Helm release blob rewrite — decode/fix/re-encode double-base64 release secret when helm marks release as failed
• OLM InstallPlan auto-approval — approve pending InstallPlan from subscription status (targeted, not global)
• vSphere CSI fallback — provisioner health probe with ODF fallback for broken CSI drivers
• Cron schedule fix — `* 10 * * *` → `0 10 * * *`

See `tools/tvk-quickstart/OCP_FIXES.md` for full details on all 21 fixes.