maestro KV refactor

[geoberle]

What this PR does

• remove maestro KV
• remove KV officer MI and use devops MI
• use SVC KV for maestro server
• use MGMT KV for maestro agent
• restructure modules so they can run in their own scope
  • cert creation in the RG of the respective KV (SVC or MGMT)
  • eventgrid access in the regional RG
• make MQTT client name for maestro server configurable

bonus

• control eventgrid public network access via config parameter

Jira: https://issues.redhat.com/browse/ARO-12515
Link to demo recording:

Special notes for your reviewer

[janboll]

that's a pretty large gap, does it work? 😅

[geoberle]

it does. i run the code a lot :)