[multi] Sweep Kyverno wait-for redis annotations to redis-master

Replaces `redis.redis:6379` with `redis-master.redis:6379` in all 11
dependency.kyverno.io/wait-for annotations across 8 stacks, plus one
docs comment in the Kyverno module.

These annotations drive DNS-only `nc -z` init-container readiness
checks — zero RW risk. Both hostnames resolve, so there is no wait-for
failure window during the rolling re-apply.

Closes: code-otr

stacks/grampsweb/main.tf

@@ -180,7 +180,7 @@ resource "kubernetes_deployment" "grampsweb" {
           app = "grampsweb"
         }
         annotations = {
-          "dependency.kyverno.io/wait-for" = "redis.redis:6379"
+          "dependency.kyverno.io/wait-for" = "redis-master.redis:6379"
         }
       }
       spec {