kubernetes-csi validating webhook

[jefflill]

It looks like we need to install a snap-shotting validating webhook for the latest CSI release. This helps with migration from beta Kubernetes APIs.

https://github.com/kubernetes-csi/external-snapshotter?tab=readme-ov-file#validating-webhook
https://github.com/kubernetes-csi/external-snapshotter/blob/master/deploy/kubernetes/webhook-example/README.md

I'm going to set this aside for now since it's not immediately obvious how to install this for production (it looks like we need a certificate from cert-manager).

[marcusbooyah]

You can inject certs using the cert-manager.io/inject-ca-from annotation