helm: Configure annotations on acl-init jobs

[alexdulin]

Currently there is no way to configure annotations on the acl-init job. This is problematic when using AWS cloud auto join to discover external servers on a cluster with applications that block access to the EC2 metadata endpoints, like Kiam. It would be extremely helpful to be able to specify annotations for the acl-init jobs with something along the lines of:

aclInit:
  annotations: |
    iam.amazonaws.com/role: some-iam-role

Alternatively, it could also inherit the annotations of the server/client configuration.

Without this, the acl-init jobs will always fail due to not being able to discover external servers by being blocked by Kiam or similar.

[david-yu]

Closing as addressed by #2525