fix(k8s): fix envFrom order, redis PVC, promtail path relabel, pin image versions, add CRB overlay patches
