[Operator] Infinispan webhook should prevent incompatible TLS configuration

It's currently possible for a user to create a Infinispan CR as follows:

spec
  security: 
    endpointEncryption: 
      certSecretName: infinispan-test-cert-secret
      certServiceName: service.beta.openshift.io
      type: Secret

Even though the `certServiceName` and `type=Secret` are incompatible. We should prevent such CRs being created.