fix(imperative): keep both SAs but use admin SA for CronJobs

Chart defaults create both imperative-sa (read-only) and imperative-admin-sa
(full admin). CronJobs need admin perms for vault init/unseal ansible playbooks.
Override serviceAccountName to imperative-admin-sa while keeping both
serviceAccountCreate and adminServiceAccountCreate at defaults (both true).

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

Author: butler54

values-baremetal.yaml

@@ -413,6 +413,7 @@ clusterGroup:
     # imagePullPolicy is set to always: imperative.imagePullPolicy
     # For additional overrides that apply to the jobs, please refer to
     # https://validatedpatterns.io/imperative-actions/#additional-job-customizations
+    serviceAccountName: imperative-admin-sa
     jobs:
     - name: init-data-gzipper
       playbook: ansible/init-data-gzipper.yaml