fix(helm): update chart kyverno to 3.2.7

[rust84-bot]

This PR contains the following updates:

Package	Update	Change
kyverno (source)	patch	3.2.6 -> 3.2.7

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[rust84-bot]

Helm Release: k8s/clusters/cluster-0/manifests/kyverno/base/helm-release.yaml

(file level)
  - one document removed:
    ---
    # Source: kyverno/templates/cleanup/cleanup-update-requests.yaml
    apiVersion: batch/v1
    kind: CronJob
    metadata:
      name: kyverno-cleanup-update-requests
      namespace: default
    spec:
      schedule: "*/10 * * * *"
      concurrencyPolicy: Forbid
      successfulJobsHistoryLimit: 1
      failedJobsHistoryLimit: 1
      jobTemplate:
        spec:
          backoffLimit: 3
          template:
            metadata:
            spec:
              serviceAccountName: kyverno-cleanup-jobs
              containers:
              - name: cleanup
                image: "bitnami/kubectl:1.28.5"
                imagePullPolicy:
                command:
                - /bin/bash
                - "-c"
                - |
                  set -euo pipefail
                  COUNT=$(kubectl get updaterequests.kyverno.io -A | wc -l)
                  if [ "$COUNT" -gt 10000 ]; then
                    echo "too many updaterequests found ($COUNT), cleaning up..."
                    kubectl delete updaterequests.kyverno.io --all -n kyverno
                  else
                    echo "($COUNT) reports found, no clean up needed"
                  fi
  
                securityContext:
                  allowPrivilegeEscalation: false
                  capabilities:
                    drop:
                    - ALL
                  privileged: false
                  readOnlyRootFilesystem: true
                  runAsNonRoot: true
                  seccompProfile:
                    type: RuntimeDefault
              restartPolicy: OnFailure
  

spec.template.spec.initContainers.kyverno-pre.image  (apps/v1/Deployment/default/kyverno-admission-controller)
  ± value change
    - ghcr.io/kyverno/kyvernopre:v1.12.5
    + ghcr.io/kyverno/kyvernopre:v1.12.6

spec.template.spec.containers.kyverno.image  (apps/v1/Deployment/default/kyverno-admission-controller)
  ± value change
    - ghcr.io/kyverno/kyverno:v1.12.5
    + ghcr.io/kyverno/kyverno:v1.12.6

spec.template.spec.containers.controller.image  (apps/v1/Deployment/default/kyverno-background-controller)
  ± value change
    - ghcr.io/kyverno/background-controller:v1.12.5
    + ghcr.io/kyverno/background-controller:v1.12.6

spec.template.spec.containers.controller.image  (apps/v1/Deployment/default/kyverno-cleanup-controller)
  ± value change
    - ghcr.io/kyverno/cleanup-controller:v1.12.5
    + ghcr.io/kyverno/cleanup-controller:v1.12.6

spec.template.spec.containers.controller.image  (apps/v1/Deployment/default/kyverno-reports-controller)
  ± value change
    - ghcr.io/kyverno/reports-controller:v1.12.5
    + ghcr.io/kyverno/reports-controller:v1.12.6

roleRef  (rbac.authorization.k8s.io/v1/RoleBinding/default/kyverno:remove-configmap)
  - one map entry removed:
    namespace: default

spec.template.spec.containers.kubectl.image  (batch/v1/Job/default/kyverno-migrate-resources)
  ± value change
    - ghcr.io/kyverno/kyverno-cli:v1.12.5
    + ghcr.io/kyverno/kyverno-cli:v1.12.6