fix: skip dry-run on ClusterSecretStore when ESO CRD not yet ready

ArgoCD syncs openbao-init before ESO CRDs are established, causing
the ClusterSecretStore sync to fail. SkipDryRunOnMissingResource
allows the sync to proceed and ArgoCD retries until ESO is ready.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: 2 people

apps/openbao-init/templates/clustersecretstore.yaml

@@ -2,6 +2,8 @@ apiVersion: external-secrets.io/v1
 kind: ClusterSecretStore
 metadata:
   name: {{ .Values.eso.clusterSecretStoreName }}
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
 spec:
   provider:
     vault: