Consider maintenance window when migrating master pods and replacing pods (rolling update)

…2842)

This way we avoid misleading "skipping major version upgrade, not in maintenance window" log line when c.currentMajorVersion is not initialized (==0)

Only schedule switchover for pod migration, consider mainWindow for PGVERSION env change

…2826)

Create the second PDB to cover Pods with a special "critical operation" label set.

This label is going to be assigned to all pg cluster's Pods by the Operator during a PG major version upgrade, by Patroni during a cluster/replica bootstrap. It can also be set manually or by any other automation tool.

Co-authored-by: Felix Kunde <felix-kunde@gmx.de>

* fix creating secrets for rotation users
* rework annotation comparison on update to decide on when to call syncSecrets

* do not remove publications of slot defined in manifest
* improve condition to sync streams
* init publication tables map when adding manifest slots
* need to update c.Stream when there is no update

Set the value from the critical-operation-pdb's selector if PDBs are enabled

…in UI backend (#2915)