This updates the heat chart to include the pod security context on the pod template. This also adds the container security context to set readOnlyRootFilesystem flag to true Change-Id: I7ba17382059dfc23ab125a49b2b302166915c350