Enable redis-pubsub in gprd

What

Enable redis-pubsub in gprd, moved from Tanka: https://gitlab.com/gitlab-com/gl-infra/k8s-workloads/tanka-deployments/-/tree/bfba153b2cd8145d6d39458676ad741ab810383e/environments/redis

See initial change: !217 (merged)

The only diff should be:

• track-id label added
• tanka.dev/environment label removed
• extra standard labels on extra resources
• vault-secrets SecretStore and ClusterRoleBinding renamed
• Some unnecessary fields removed from ExternalSecrets

Why

CR: gitlab-com/gl-infra/production#20785 (closed)

Issue: gitlab-com/gl-infra/production-engineering#27795 (closed)