fix: reconcile sops-secrets-operator from operators

[xnoto]

Summary

• move the sops-secrets-operator child Application into the actively reconciled operators tree
• remove the bootstrap-only wait hook/Application wiring that was not creating the app in ArgoCD
• keep the change additive: no SopsSecret migration, no AWS credentials, no KMS identifiers, no KSOPS removal

Validation

• scanned YAML/Markdown for explicit AWS account IDs, KMS ARNs/object IDs, and AWS access-key env names
• kustomize build operators/sops-secrets-operator
• kustomize build bootstrap
• pre-commit run --all-files

Notes

• Full local kustomize build operators is blocked by existing KSOPS generator usage in other operator dirs unless ArgoCD's KSOPS plugin environment is available; the new operator subtree builds cleanly.
• After merge, gitops-operators should create argocd/sops-secrets-operator and the Helm chart should install the SopsSecret CRD/controller.