[release-0.14 / sylva-1.7] fix CI checks (upgrade gitleaks to-be-continuous template, align controller manifests)

This MR has two things to avoid CI failures in release-0.14-sylva-1.7 branch:

• a backport of !591 (merged) -- without this we hit issues like https://gitlab.com/sylva-projects/sylva-elements/sylvactl/-/jobs/15245453256
• align controller manifests with what sylva-core has (or else we hit https://gitlab.com/sylva-projects/sylva-elements/sylvactl/-/jobs/15246812671)