ci: update mirroring container-images job for new OCP

The new OpenShift cluster complained about deprecated types and missing
options in the yaml files.

Signed-off-by: Niels de Vos <ndevos@ibm.com>

mirror/mirror-buildconfig.yaml

@@ -1,5 +1,5 @@
 ---
-apiVersion: v1
+apiVersion: image.openshift.io/v1
 kind: ImageStream
 metadata:
   name: mirror-images
@@ -9,7 +9,7 @@ spec:
   tags:
     - name: latest
 ---
-apiVersion: v1
+apiVersion: build.openshift.io/v1
 kind: BuildConfig
 metadata:
   name: mirror-images

mirror/mirror-cronjob.yaml

@@ -1,5 +1,5 @@
 ---
-apiVersion: batch/v1beta1
+apiVersion: batch/v1
 kind: CronJob
 metadata:
   name: mirror-images
@@ -33,4 +33,11 @@ spec:
                     secretKeyRef:
                       name: container-registry-auth
                       key: passwd
+              securityContext:
+                allowPrivilegeEscalation: false
+                runAsNonRoot: true
+                capabilities:
+                  drop: ["ALL"]
+                seccompProfile:
+                  type: RuntimeDefault
           restartPolicy: OnFailure