Apply TLS profile settings to the webhook server via controller-runtime's webhook.Options.TLSOpts.

File to modify:

• cmd/kueue/main.go
• pkg/config/config.go (addTo function)

Implementation:

webhookServer := webhook.NewServer(webhook.Options{
    Port:    *cfg.Webhook.Port,
    Host:    cfg.Webhook.Host,
    CertDir: cfg.Webhook.CertDir,
    TLSOpts: []func(*tls.Config){
        func(config *tls.Config) {
            config.MinVersion = tlsVersionFromConfig(cfg.Webhook.MinTLSVersion)
            config.CipherSuites = cipherSuitesFromConfig(cfg.Webhook.CipherSuites)
        },
    },
})

Acceptance Criteria:

• Webhook server respects minTLSVersion from configuration
• Webhook server respects cipherSuites from configuration
• Defaults to Intermediate profile when not specified
• TLS scanner confirms correct settings on webhook endpoints

Depends on: OCPKUEUE-451 (API fields)