Update Mintmaker staging deployment (#3868)

1. Add the `pipelines-as-code-secret` to staging env, this secret is
   required for Mintmaker to communicate with the Konflux PaC GitHub
   app. We use the secret from build-service.
2. Mount CA bundle with `rh-certs` component, it's required for
   Mintmaker to call Githup APIs.

Signed-off-by: Qixiang Wan <qwan@redhat.com>

Author: qixiang

argo-cd-apps/base/member/infra-deployments/mintmaker/mintmaker.yaml

@@ -12,9 +12,11 @@ spec:
               values:
                 sourceRoot: components/mintmaker
                 environment: staging
-                clusterDir: ""
+                clusterDir: base
           - list:
-              elements: []
+              elements:
+                - nameNormalized: stone-stage-p01
+                  values.clusterDir: stone-stage-p01
   template:
     metadata:
       name: mintmaker-{{nameNormalized}}

components/mintmaker/staging/base/kustomization.yaml

@@ -0,0 +1,16 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- ../../base
+- ../../base/external-secrets
+- https://github.com/konflux-ci/mintmaker/config/default?ref=f6a6a9c25b02d3ca6cd808d5d440529de006d994
+
+namespace: mintmaker
+
+images:
+- name: quay.io/konflux-ci/mintmaker
+  newName: quay.io/konflux-ci/mintmaker
+  newTag: f6a6a9c25b02d3ca6cd808d5d440529de006d994
+
+commonAnnotations:
+  argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true

components/mintmaker/staging/kustomization.yaml

@@ -0,0 +1,15 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- ../base
+namespace: mintmaker
+patches:
+  - path: pipelines-as-code-secret-path.yaml
+    target:
+      name: pipelines-as-code-secret
+      group: external-secrets.io
+      version: v1beta1
+      kind: ExternalSecret
+
+components:
+  - ../../components/rh-certs

components/mintmaker/staging/stone-stage-p01/kustomization.yaml

@@ -0,0 +1,4 @@
+---
+- op: add
+  path: /spec/dataFrom/0/extract/key
+  value: staging/build/stone-stage-p01/github-app