feat: switch back to nautobot helm chart

The upstream helm chart has been fixed with the patches we need so
there's no reason to include the rendered helm chart any longer.
Unfortunately there's a breaking change here around how the
NAUTOBOT_SECRET_KEY is handled which can only be supplied via a helm
variable and not via a reference.

apps/components/nautobot.yaml

@@ -8,30 +8,30 @@ spec:
     - repoURL: https://github.com/rackerlabs/understack.git
       path: components/nautobot-redis/
       targetRevision: ${UC_REPO_REF}
+    - repoURL: https://nautobot.github.io/helm-charts/
+      chart: nautobot
+      targetRevision: 2.1.0
+      helm:
+        releaseName: nautobot
+        valuesFiles:
+          - $understack/components/nautobot/values.yaml
+          - $secrets/helm-configs/${DEPLOY_NAME}/nautobot.yaml
+        fileParameters:
+          - name: nautobot.config
+            path: $understack/components/nautobot/nautobot_config.py
     - repoURL: https://github.com/rackerlabs/understack.git
       path: components/nautobot/
       targetRevision: ${UC_REPO_REF}
-      kustomize:
-        patches:
-          - target:
-              kind: Ingress
-              name: nautobot
-            patch: |-
-              - op: replace
-                path: /spec/rules/0/host
-                value: nautobot.${DNS_ZONE}
-              - op: replace
-                path: /spec/tls/0/hosts/0
-                value: nautobot.${DNS_ZONE}
-              - op: replace
-                path: '/metadata/annotations/cert-manager.io~1cluster-issuer'
-                value: ${DEPLOY_NAME}-cluster-issuer
+      directory:
+        include: dexauth-cm.yaml
+      ref: understack
     - repoURL: ${UC_DEPLOY_GIT_URL}
       path: secrets/${DEPLOY_NAME}/
       targetRevision: ${UC_DEPLOY_REF}
       directory:
         include: 'secret-nautobot*.yaml'
         exclude: secret-nautobot-sso-dex.yaml
+      ref: secrets
   destination:
     server: "https://kubernetes.default.svc"
     namespace: nautobot