vmsingle: introduce scraping support

[AndrewChubatiuk]

moved scraping logic to vmscrapes package and introduced scraping support for vmsingle (disabled by default). ingestOnlyMode should be set to false to enable scraping
fixes #1694

[Copilot]

Pull request overview

Copilot reviewed 48 out of 49 changed files in this pull request and generated no new comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[AndrewChubatiuk]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@AndrewChubatiuk I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

3 issues found across 43 files

Prompt for AI agents (all issues)

Check if these issues are valid — if so, understand the root cause of each and fix them.


<file name="internal/controller/operator/factory/vmsingle/rbac.go">

<violation number="1" location="internal/controller/operator/factory/vmsingle/rbac.go:123">
P2: Misleading error message: `ensureRoleExist` handles a namespace-scoped `Role`, not a `ClusterRole`. The error message should say "role" instead of "cluster role" to match the actual resource type and aid debugging.</violation>
</file>

<file name="internal/controller/operator/factory/vmsingle/vmsingle.go">

<violation number="1" location="internal/controller/operator/factory/vmsingle/vmsingle.go:396">
P1: Inconsistent default value for strict security. `enableStrictSecurity` uses `false` as default while `useStrictSecurity` (defined earlier) uses `cfg.EnableStrictSecurity`. This inconsistency can override security settings when the CR doesn't specify `UseStrictSecurity`. Consider using `useStrictSecurity` here instead.</violation>
</file>

<file name="docs/CHANGELOG.md">

<violation number="1" location="docs/CHANGELOG.md:22">
P1: Rule violated: **Changelog Review Agent**

Changelog entry is missing required user-centric before/after explanation and a reference link (issue/PR), which are mandatory per the changelog structure.</violation>
</file>

_{Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.}

[vrutkovs]

Do we need a config reloader in VMSingle?

[AndrewChubatiuk]

Do we need a config reloader in VMSingle?

with scraping enabled it's required

[AndrewChubatiuk]

renamed GetClusterRoleName to GetRBACName