Allow change admin password hook to run only on install

[nigel-dev]

Change to allow change admin password hook to run only on install or on install and upgrade by default.

We needed to only have this hook run on install vs on install and upgrade, so we were trying to kustomize patch out the post-upgrade bit via a post render but we ran into a problem with helm/flux not being able to patch hooks (helm/helm#7891). We are pulling in the SonarQube chart as a sub-chart so directly editing the hook is not really an option.

After some discussion, we thought it would be faster to try and just make a small change to this chart vs wait for a new helm release and subsequent inclusion in flux.

Part of

Please ensure your pull request adheres to the following guidelines:

• explain your motives to contribute this change: what problem you are trying to fix, what improvement you are trying to make
• Document your Changes in the CHANGELOG.md file of the respected chart as well as the Chart.yaml

[nigel-dev]

@jCOTINEAU @carminevassallo @davividal Just bumping this as it has been blocking us for a month. It also does not look like the fix on the helm side is going to make it into a release any time soon.