References printcolumn shows raw JSON instead of useful summary

[Sanskarzz]

Summary

• kubectl get output for MCPExternalAuthConfig, MCPOIDCConfig, and MCPToolConfig rendered References as raw JSON because the printer column pointed at
  .status.referencingWorkloads, which is an array of workload reference objects.
• Added a status.referenceCount field to those resources and updated the References printer column to show the integer count instead.
• Updated controllers to keep referenceCount in sync whenever referencingWorkloads changes.
• Regenerated CRD manifests and Helm CRD templates.

Fixes #4618

Type of change

• Bug fix
• New feature
• Refactoring (no behavior change)
• Dependency update
• Documentation
• Other (describe):

Test plan

• Unit tests (task test)
• E2E tests (task test-e2e)
• Linting (task lint-fix)
• Manual testing (describe below)

API Compatibility

• This PR does not break the v1beta1 API, OR the api-break-allowed label is applied and the migration guidance is described above.

This adds an optional status field, referenceCount, and keeps the existing referencingWorkloads field unchanged.

Changes

File	Change
cmd/thv-operator/api/v1alpha1/types.go	Updated affected v1alpha1 print columns to use .status.referenceCount
cmd/thv-operator/api/v1beta1/*config_types.go	Added referenceCount status fields and updated print columns
cmd/thv-operator/controllers/*	Populated referenceCount alongside referencingWorkloads
cmd/thv-operator/controllers/workload_reference_count.go	Added guarded helper for converting workload reference length to int32
deploy/charts/operator-crds/**	Regenerated CRD manifests and Helm templates

Does this introduce a user-facing change?

Yes. kubectl get now shows the References column as a count instead of raw JSON for MCPExternalAuthConfig, MCPOIDCConfig, and MCPToolConfig.

Special notes for reviewers

The detailed workload references are still available in .status.referencingWorkloads; this only changes the default table output to use .status.referenceCount.

[codecov]

Codecov Report

❌ Patch coverage is 86.95652% with 3 lines in your changes missing coverage. Please review.
✅ Project coverage is 68.40%. Comparing base (17451d1) to head (b52eafd).
⚠️ Report is 2 commits behind head on main.

Files with missing lines	Patch %	Lines
.../thv-operator/controllers/toolconfig_controller.go	60.00%	1 Missing and 1 partial ⚠️
...v-operator/controllers/mcpoidcconfig_controller.go	75.00%	0 Missing and 1 partial ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #5267      +/-   ##
==========================================
+ Coverage   68.39%   68.40%   +0.01%     
==========================================
  Files         619      620       +1     
  Lines       63318    63354      +36     
==========================================
+ Hits        43305    43340      +35     
+ Misses      16782    16776       -6     
- Partials     3231     3238       +7     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[amirejaz]

Thanks for the contribution! The overall approach is solid — storing a derived referenceCount integer on the status and pointing the printer column at it is exactly the right fix for the raw-JSON display problem. The code is well-structured, tests are thorough, and the CRD manifests and docs are all regenerated consistently.

I have a couple of observations worth discussing, mostly around the stale-count repair path that was added to the three updateOIDCConfigReferencingWorkloads functions.