Put all of our APIs into a "pinniped" category, and never use "all".

We want to have our APIs respond to `kubectl get pinniped`, and we shouldn't use `all` because we don't think most average users should have permission to see our API types, which means if we put our types there, they would get an error from `kubectl get all`.

I also added some tests to assert these properties on all `*.pinniped.dev` API resources.

Signed-off-by: Matt Moyer <moyerm@vmware.com>

deploy/concierge/authentication.concierge.pinniped.dev_webhookauthenticators.yaml

@@ -11,9 +11,9 @@ spec:
   group: authentication.concierge.pinniped.dev
   names:
     categories:
-    - all
-    - authenticator
-    - authenticators
+    - pinniped
+    - pinniped-authenticator
+    - pinniped-authenticators
     kind: WebhookAuthenticator
     listKind: WebhookAuthenticatorList
     plural: webhookauthenticators

deploy/concierge/config.concierge.pinniped.dev_credentialissuers.yaml

@@ -10,6 +10,8 @@ metadata:
 spec:
   group: config.concierge.pinniped.dev
   names:
+    categories:
+    - pinniped
     kind: CredentialIssuer
     listKind: CredentialIssuerList
     plural: credentialissuers
@@ -19,6 +21,7 @@ spec:
   - name: v1alpha1
     schema:
       openAPIV3Schema:
+        description: Describes the configuration status of a Pinniped credential issuer.
         properties:
           apiVersion:
             description: 'APIVersion defines the versioned schema of this representation

deploy/supervisor/config.supervisor.pinniped.dev_oidcproviders.yaml

@@ -10,6 +10,8 @@ metadata:
 spec:
   group: config.supervisor.pinniped.dev
   names:
+    categories:
+    - pinniped
     kind: OIDCProvider
     listKind: OIDCProviderList
     plural: oidcproviders