Because we bulk apply all Kustomize-generated resources during a QuayRegistry reconcile, sometimes Deployments can be created before their needed Secrets, resulting in an error from k8s when it tries to mount the referenced Secret.

This can be easily solved by sorting the Kustomize-generated resources to put Secrets, ConfigMaps, PersistentVolumeClaims, ObjectBucketClaims, and ServiceAccounts before other resources.