the MariaDB operator allows for mariadb databases to be created within a galera server, but the username is hardcoded to that of the database name, and the password does not support changing.   There is no means of creating new username/passwords in the database so that password rotation schemes can be used.   Create a MariaDBAccount CRD which provides for a username/secret that can be created and dropped independently of its parent MariaDBDatabase.

Subsequent to that, create APIs and flows that will allow downstream controllers to take advantage of MariaDBAccount including that usernames/passwords are generated and that we are fully decoupled from osp-secret.