chore: runAsNonRoot and fix empty CRD fields (#975)

Author: sbernauer

CHANGELOG.md

@@ -13,10 +13,18 @@ All notable changes to this project will be documented in this file.
   functions and carry the full set of recommended labels ([#966]).
 - BREAKING: The `nodes` role is now required by the CRD; a NifiCluster without it was
   previously accepted by the API server but failed reconciliation ([#966]).
+- All product containers now run with `securityContext.runAsNonRoot` set to `true` to improve security ([#975]).
+
+### Fixed
+
+- Fix a longstanding problem of including empty `categories`, `shortNames` and `additionalPrinterColumns` in the CRDs,
+  which could cause problems with GitOps tools (e.g. ArgoCD) reporting a diff in the custom resources.
+  See [our internal issue](https://github.com/stackabletech/hdfs-operator/issues/626) and [the fix](https://github.com/kube-rs/kube/pull/2042) for details ([#975]).
 
 [#961]: https://github.com/stackabletech/nifi-operator/pull/961
 [#966]: https://github.com/stackabletech/nifi-operator/pull/966
 [#970]: https://github.com/stackabletech/nifi-operator/pull/970
+[#975]: https://github.com/stackabletech/nifi-operator/pull/975
 
 ## [26.7.0] - 2026-07-21