Extend verify-backup-sidecar to assert the sidecar's API_USERNAME/API_PASSWORD
env resolve valueFrom the backup-api-auth Secret's username/password keys, not
just that the Secret and the :7171 port exist independently. A chart change
that repointed or dropped those secretKeyRefs while keeping both would slip
through and surface only as 401s at BackupJob time — the silent break this
suite exists to catch.
Assisted-By: Claude <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Signed-off-by: Andrey Kolkov <androndo@gmail.com>