feature request: multitenant k8s

[kurisufriend]

at the moment all the vtluug apps are in the default namespace, and only admins can interact with anything. users should get their own (reasonably resource limited (?)) namespaces! and http routes! that they can use from an unprivileged context!

[kurisufriend]

there may exist solutions for this but at the moment it seems like we could trivially put together an operator that maps FreeIPA/LDAP users onto luug-<username> namespaces, then generates appropriate RBAC.