trust-manager trust namespace must align with controller namespace

[qrkourier]

This necessary alignment presents a pitfall encountered at least once in #133

The requirement is that trust-manager must have exactly one namespace from which it sources secrets and configmaps to compose Bundle resources, so that namespace must be the one where ziti-controller is installed.

The solution is probably a template check that will fail during Helm release upgrade/install when the following conditions are met:

1. trust-manager sub-chart is enabled
2. the trust-manager trust namespace property does not exactly match the controller's namespace

[qrkourier]

The does not address any scenario where trust-manager is installed in advance, not as a sub-chart of ziti-controller. In those scenarios, it is impractical for the controller's chart to detect the misalignment, so the controller release will fail to install/upgrade in case of misconfiguration.

[qrkourier]

Relatedly: #67