Simplify Harbor to standard deployment pattern

- ExternalSecret now pulls only HARBOR_ADMIN_PASSWORD from 1Password
- Removed database, redis, core, jobservice, registry secret references
- Harbor Helm chart auto-generates all internal secrets (standard pattern)
- Reduces complexity and aligns with Harbor best practices

This change removes dependency on 5 1Password fields that should be deleted:
- database-password
- redis-password
- core-secret
- jobservice-secret
- registry-password

Only harbor-admin-password field needed in 1Password item 'the-seas'

cluster/platform/harbor/externalsecret.yaml

@@ -1,11 +1,13 @@
 # ------------------------------------------------------------------------------
 # ExternalSecret — Harbor Credentials
 # Pulled from 1Password via Connect Server, materialized as a K8s secret
-# in the-seas namespace for use by Harbor components.
+# in the harbor namespace for use by Harbor admin authentication.
 #
-# In 1Password, these are stored in the "the-seas" item in the "mk-labs" vault
-# with fields: harbor-admin-password, database-password, redis-password,
-# core-secret, jobservice-secret, registry-password
+# In 1Password, stored in the "the-seas" item in the "mk-labs" vault
+# with field: harbor-admin-password
+#
+# NOTE: All internal secrets (database, redis, registry, core, jobservice)
+# are auto-generated by the Harbor Helm chart. This is the standard pattern.
 # ------------------------------------------------------------------------------
 apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
@@ -25,29 +27,3 @@ spec:
       remoteRef:
         key: the-seas
         property: harbor-admin-password
-    
-    - secretKey: DATABASE_PASSWORD
-      remoteRef:
-        key: the-seas
-        property: database-password
-    
-    - secretKey: REDIS_PASSWORD
-      remoteRef:
-        key: the-seas
-        property: redis-password
-    
-    # Core secret - Harbor Helm chart expects key named 'secret' not 'CORE_SECRET'
-    - secretKey: secret
-      remoteRef:
-        key: the-seas
-        property: core-secret
-    
-    - secretKey: JOBSERVICE_SECRET
-      remoteRef:
-        key: the-seas
-        property: jobservice-secret
-    
-    - secretKey: REGISTRY_PASSWD
-      remoteRef:
-        key: the-seas
-        property: registry-password