Integration test for Supervisor secret controllers

This forced us to add labels to the CSRF cookie secret, just as we do
for other Supervisor secrets. Yay tests.

Signed-off-by: Andrew Keesler <akeesler@vmware.com>

cmd/pinniped-supervisor/main.go

@@ -152,6 +152,7 @@ func startControllers(
 		WithController(
 			generator.NewSupervisorSecretsController(
 				supervisorDeployment,
+				cfg.Labels,
 				kubeClient,
 				secretInformer,
 				func(secret []byte) {