GeezerVison

- Add minimizeSnapshot to filter out TLS secrets lacking client certificates
- Improve privacy and reduce snapshot size for CyberArk uploads
- Implement isExcludableSecret and isExcludableTLSSecret helpers
- Add unit tests for minimization and exclusion logic

Signed-off-by: Richard Wall <[email protected]>

This commit refactors the `Snapshot` resource types to use `client.Object`
instead of `runtime.Object`, aiming to improve type safety.
This reduces the amount of type casting and associated error handling in the
minimizeSnapshot code and allows the logging of dropped secret name and
namespace becasue the secret objects are known to satisfy both metav1.Object and
runtime.Object.
The extractResourceListFromReading function needed to be updated accordingly to
handle generic types.

- Replace runtime.Object with client.Object and *unstructured.Unstructured
  in Snapshot struct and related functions
- Refactor minimizeSnapshot and isExcludableSecret to use new types
- Update extractResourceListFromReading to use generics for resource type
- Adjust tests to match new resource type signatures and expectations
- Add "type" field to example Secret in input.json for clarity

Signed-off-by: Richard Wall <[email protected]>