Make layer 1 optional

[ensonic]

For more flexible deployments and better testability, it would be great to be able to disable layer 1 features (robot federation).

Status:

• Introduce a new customization var for layer 1. #425 adds a config.sh var for that and passes it to terraform + helm
• Start to apply the layer 1 customization. #426 uses it terraform to disable a bunch of cloud resources and defact disabled regobot registrytions

Challenges:

• disabling the src/app_charts/base/cloud/registry-crd.yaml
  • this is also referenced in app-management-policy.yaml and cr-syncer.yaml (can probably make it conditional)
• not running token-vendor
  • this also provides human-acl - either try to get rid of it (?) or add more options to token-vendor to disable the robot-support
  • human-acl can be disabled if ONPREM_FEDERATION==false and noth OAUTH2 config is set
• app-rollouts: probably also need to be aware and disable trying to use the robot-crs