kuberenetes simplification

- helm-first: no custom manifests, no generated manifests, entire workflow will be through helm charts.
- don't have N different kinds of images: everything will be FIPS-compatible and distroless (we don't need photon)