Embed vault server in safe container

We want to open the vault challenges to the ctf by adding a vault dev server to the teamnamespace by means of javascript. This requires:

• vault container with deployment and service
• Rbac extension for player to describe and read logs of pods/deployment
• Nsp extension to make vault, desktop, and WrongSecrets talk to eachbother in same namespace
• extend balancer to proxy to vault
• Add initialisation JavaScript to give vault the right policies and contents
• Extend tests
• have a PVC for just vault isolated for each NS