Instead of creating namespaces and kyverno policies by hand, let's create LDAP entries
that maintain-kubeusers will then manage.

And while at it, add an account cleanup script to revert the effects produced by
the creation script.

Signed-off-by: Arturo Borrero Gonzalez <aborrero@wikimedia.org>