Adds SQL to postInitApplicationSQL granting schema permissions to PUBLIC. Allows any role (authentik, temporal, etc) to create tables in databases. For existing cluster: run SQL manually (done). For future bootstrap: automatic via initdb. Pattern for apps: Database CR + app-specific init Job optional (co-located).