epic: fold remaining OpenShift actions into this repo

## Goal
One repo. Remaining OpenShift actions live here. Consumers pin a release. Kill `quickstart-openshift-helpers`.

## In (`v0.1.0`)
- [x] `cleanup-pr`
- [x] `route-tls`
- [x] `oc-runner`
- [x] `crunchy`
- [x] `deployer` (the action)
- [x] reusable schema-spy workflow (copy; refresh later)

## Do not port
- Helpers `.deployer.yml` — not used by the template or our daily repos. A handful of others still pin it (enmods, rfc-db, ticdi, qsos-leaflet, …). They keep working on existing helper tags. Replacement is `deployer` here, not another shared workflow.

## Left (actions, not shared workflows)
- [ ] `.pr-close` → already `cleanup-pr`; do not copy the workflow (retag is optional)
- [ ] `.pr-validate` → already `bcgov/actions/pr-validate`
- [ ] `.schema-spy` → action if Postgres runs inside the job; otherwise keep the one workflow (job services)
- [ ] `cert-setup/` (`csr_generator`, `install_cert`) → here next to `route-tls`
- [ ] `oc_scripts/` + `openshift-reporter/` → actions or `scripts/` here
- [ ] Drop helpers `crunchy/values.yml` (already here) and helpers’ own CI
- [ ] Archive helpers and the standalone action repos
- [ ] Bump consumers we own after a tag

## Do not
- Compatibility wrappers or “hard-error later” issues
- Pin anyone to `@main` or a SHA
- Notify the org before a tag
- Extra process issues