kubernetes upgrade to 1.20

GitLab OIDC provider to replace dependency on keycloak

• users are still terraformed
• initial passwords still stored in vault
• now includes admin and developer access to gitlab, vault, argo workflows, and argo cd

improved provisioning time

reduced init.sh time from 54 to 46 minutes

misc

• improved error handling on destroy