chore: purge OpenShift-era references from docs and bootstrap

[xnoto]

Summary

Wholistic cleanup of OpenShift / CRC / WARP-only doc framing across kustomize-cluster:

• README.md / AGENTS.md — replace the three-row domain table with the actual two-pattern reality (HTTP via TunnelBinding, TCP via ClusterTunnel for kubectl). Drops `api.makeitwork.cloud` and `*.apps.makeitwork.cloud` rows entirely; those hostnames were OpenShift IngressController/API server ergonomics and are not in use.
• bootstrap/wait-for-repo-server.yaml, bootstrap/wait-for-crds.yaml — kube-linter `latest-tag` ignore reason said "Using cluster-managed OpenShift CLI imagestream". The image is `bitnami/kubectl:latest`; reason now accurately reflects that.
• bootstrap/ci-token-sync-job.yaml — the synced GitHub Actions secret is renamed from `OPENSHIFT_TOKEN` to `CI_DEPLOYER_TOKEN`. Comments and echo strings updated to match.

Out of scope (follow-up)

• `operators/ansible/operator.yaml` still uses `namespace: openshift-marketplace` (OLM CatalogSource + Subscription pattern). On k3s without OLM that file is broken or unused — moving AWX to a Helm chart or removing it is a separate decision and a deeper change.
• The orphan `OPENSHIFT_TOKEN` secret on each repo will need a manual delete after this lands (`gh secret delete OPENSHIFT_TOKEN --repo …`).

Test plan

• Pre-commit clean
• After ArgoCD sync, the PostSync `ci-token-sync` Job pushes `CI_DEPLOYER_TOKEN` to images and kustomize-cluster

🤖 Generated with Claude Code