fix(eso): chart 0.6.2 - revert fullnameOverride; use templated SA in ClusterSecretStore

Chart 0.6.1's fullnameOverride attempted to give ESO resources stable
names (just 'external-secrets' instead of '<release>-external-secrets')
but ArgoCD couldn't fully drain the prefixed resources from 0.6.0,
leaving sync stuck. Reverting: keep the subchart's default release-
prefixed naming, template the SA reference in ClusterSecretStore via
{{ .Release.Name }}-external-secrets so it resolves correctly per
cluster.

templates/openbao-secretstore.yaml

@@ -27,7 +27,11 @@ spec:
           mountPath: {{ .Values.externalSecrets.openbao.mountPath | quote }}
           role: {{ .Values.externalSecrets.openbao.role | default "eso" | quote }}
           serviceAccountRef:
-            name: external-secrets
+            # ESO subchart names its SA `<release>-external-secrets`
+            # (no fullnameOverride — see values.yaml). The OpenBao
+            # role's bound_service_account_names must match this
+            # exact name (e.g. `qsoft-platform-external-secrets`).
+            name: "{{ .Release.Name }}-external-secrets"
             namespace: odoosky-system
 {{- end }}
 {{- end }}