[2280] [Upgrade] Delete custom resources per kind instead of per object during cleanup

[sarika-pf9]

What this PR does / why we need it

• Cleanup now deletes each CR kind with a single DeleteCollection call instead of one call per object — flat instead of ~2000 calls on a large vCenter, and no list-then-delete gap for the creds cascade to race, so the "already removed" errors stop.
• Pre-upgrade checks use Limit: 2 instead of paging the whole inventory to answer yes/no.
• Cleanup waits for the credential finalizers to finish before re-running the checks, so a slow cascade no longer aborts with pre-upgrade checks still failing after cleanup.

Which issue(s) this PR fixes

fixes #2280

Testing done

Screen.Recording.2026-08-25.at.1.44.50.PM.mov

[github-actions]

✅ Security Vulnerability Summary

No change in security posture

📊 Overall Changes

Metric	Count
Total Added	0
Total Fixed	0
Net Change	0

🔍 Detailed Breakdown

📦 Gosec (Static Analysis)

Current	Baseline	Added	Fixed	Method
0	0	0	0	artifact

📦 Trivy (Dependency Scan)

Current	Baseline	Added	Fixed	Method
92	92	0	0	artifact

📋 Baseline Methods

• 📦 artifact: Used stored report from main branch
• 🔄 live_scan: Scanned base branch in real-time
• ⚠️ no_baseline: No baseline available (all vulnerabilities treated as new)

---

Only HIGH and CRITICAL severity vulnerabilities are tracked
Baseline: acc9f06e7243ff17832272ad8c549aed38127027

[github-actions]

🚨 Security Vulnerability Summary

Security posture degraded

📊 Overall Changes

Metric	Count
Total Added	3
Total Fixed	0
Net Change	+3

🔍 Detailed Breakdown

📦 Gosec (Static Analysis)

Current	Baseline	Added	Fixed	Method
0	0	0	0	artifact

📦 Trivy (Dependency Scan)

Current	Baseline	Added	Fixed	Method
95	92	3	0	artifact

📋 Baseline Methods

• 📦 artifact: Used stored report from main branch
• 🔄 live_scan: Scanned base branch in real-time
• ⚠️ no_baseline: No baseline available (all vulnerabilities treated as new)

🚨 Added Vulnerabilities

Trivy (Dependencies) - 3 Added

Target: vjailbreak-ai/requirements.txt
Package: chromadb 0.5.20
Vulnerability: CVE-2026-45830
Severity: HIGH
Title: chromadb: ChromaDB: Unauthorized data manipulation due to improper authorization validation

Target: vjailbreak-ai/requirements.txt
Package: chromadb 0.5.20
Vulnerability: CVE-2026-45831
Severity: HIGH
Title: ChromaDB: ChromaDB: Unauthorized cross-tenant actions due to improper authorization checks

Target: vjailbreak-ai/requirements.txt
Package: chromadb 0.5.20
Vulnerability: CVE-2026-45833
Severity: CRITICAL
Title: chromadb: ChromaDB: Arbitrary Code Execution via Code Injection

---

Only HIGH and CRITICAL severity vulnerabilities are tracked
Baseline: acc9f06e7243ff17832272ad8c549aed38127027

[github-actions]

🚨 Security Vulnerability Summary

Security posture degraded

📊 Overall Changes

Metric	Count
Total Added	3
Total Fixed	0
Net Change	+3

🔍 Detailed Breakdown

📦 Gosec (Static Analysis)

Current	Baseline	Added	Fixed	Method
0	0	0	0	artifact

📦 Trivy (Dependency Scan)

Current	Baseline	Added	Fixed	Method
95	92	3	0	artifact

📋 Baseline Methods

• 📦 artifact: Used stored report from main branch
• 🔄 live_scan: Scanned base branch in real-time
• ⚠️ no_baseline: No baseline available (all vulnerabilities treated as new)

🚨 Added Vulnerabilities

Trivy (Dependencies) - 3 Added

Target: vjailbreak-ai/requirements.txt
Package: chromadb 0.5.20
Vulnerability: CVE-2026-45830
Severity: HIGH
Title: chromadb: ChromaDB: Unauthorized data manipulation due to improper authorization validation

Target: vjailbreak-ai/requirements.txt
Package: chromadb 0.5.20
Vulnerability: CVE-2026-45831
Severity: HIGH
Title: ChromaDB: ChromaDB: Unauthorized cross-tenant actions due to improper authorization checks

Target: vjailbreak-ai/requirements.txt
Package: chromadb 0.5.20
Vulnerability: CVE-2026-45833
Severity: CRITICAL
Title: chromadb: ChromaDB: Arbitrary Code Execution via Code Injection

---

Only HIGH and CRITICAL severity vulnerabilities are tracked
Baseline: e8bf3d43dcc8609678bffff2d1f9b7433d17ba2f

[github-actions]

✅ Security Vulnerability Summary

No change in security posture

📊 Overall Changes

Metric	Count
Total Added	0
Total Fixed	0
Net Change	0

🔍 Detailed Breakdown

📦 Gosec (Static Analysis)

Current	Baseline	Added	Fixed	Method
0	0	0	0	artifact

📦 Trivy (Dependency Scan)

Current	Baseline	Added	Fixed	Method
95	95	0	0	artifact

📋 Baseline Methods

• 📦 artifact: Used stored report from main branch
• 🔄 live_scan: Scanned base branch in real-time
• ⚠️ no_baseline: No baseline available (all vulnerabilities treated as new)

---

Only HIGH and CRITICAL severity vulnerabilities are tracked
Baseline: 4b13a69ff80d2cafe688a8154e58a364f074c1a7

[github-actions]

✅ Security Vulnerability Summary

No change in security posture

📊 Overall Changes

Metric	Count
Total Added	0
Total Fixed	0
Net Change	0

🔍 Detailed Breakdown

📦 Gosec (Static Analysis)

Current	Baseline	Added	Fixed	Method
0	0	0	0	artifact

📦 Trivy (Dependency Scan)

Current	Baseline	Added	Fixed	Method
95	95	0	0	artifact

📋 Baseline Methods

• 📦 artifact: Used stored report from main branch
• 🔄 live_scan: Scanned base branch in real-time
• ⚠️ no_baseline: No baseline available (all vulnerabilities treated as new)

---

Only HIGH and CRITICAL severity vulnerabilities are tracked
Baseline: 4b13a69ff80d2cafe688a8154e58a364f074c1a7