Fix apps selfHeal and borgmatic secret field name

- Disable selfHeal on apps app to allow manual revision changes during dev
- Fix secret-borgmatic.yaml.tpl to use db-password field

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

argocd/apps/apps.yaml

@@ -17,8 +17,7 @@ spec:
   syncPolicy:
     automated:
       prune: true
-      selfHeal: true
+      # selfHeal disabled: allows manual revision changes on child apps during development
+      # Sync apps app manually when adding/removing Application manifests
     syncOptions:
       - CreateNamespace=true
-  # Auto-sync enabled: new/changed Application manifests appear automatically
-  # but child apps still require manual sync (they have manual sync policy)

argocd/manifests/databases/secret-borgmatic.yaml.tpl

@@ -10,4 +10,4 @@ metadata:
 type: kubernetes.io/basic-auth
 stringData:
   username: borgmatic
-  password: {{ op://vg6xf6vvfmoh5hqjjhlhbeoaie/mw2bv5we7woicjza7hc6s44yvy/password }}
+  password: {{ op://vg6xf6vvfmoh5hqjjhlhbeoaie/mw2bv5we7woicjza7hc6s44yvy/db-password }}