The operator should (optionally) be able to provision Kerberos keytabs dynamically from the KDC, rather than reading them from static secrets.

Acceptance criteria:

• Backend/type configuration - Type configuration #8
• Load admin keytab and KDC mapping
• Create pod keytab for a given scope (node FQDN, pod FQDN, etc) on demand