[multi] Sweep Kyverno wait-for redis annotations to redis-master

Replaces `redis.redis:6379` with `redis-master.redis:6379` in all 11
dependency.kyverno.io/wait-for annotations across 8 stacks, plus one
docs comment in the Kyverno module.

These annotations drive DNS-only `nc -z` init-container readiness
checks — zero RW risk. Both hostnames resolve, so there is no wait-for
failure window during the rolling re-apply.

Closes: code-otr

stacks/kyverno/modules/kyverno/dependency-init-containers.tf

@@ -7,7 +7,7 @@
 #
 # Usage:
 #   annotations:
-#     dependency.kyverno.io/wait-for: "postgresql.dbaas:5432,redis.redis:6379"
+#     dependency.kyverno.io/wait-for: "postgresql.dbaas:5432,redis-master.redis:6379"
 #
 # Each comma-separated entry becomes a busybox init container that runs
 # `nc -z <host> <port>` in a loop until the dependency is reachable.