Update VPA jobs to work with istio injection

Currently when installing VPA via the bigbang packages: key it gets istio-injected by default and the job used to create the CRDs needs to either not be istio injected or have an section after the job script runs to exit out of the istio-proxy

Set sidecar.istio.io/inject: "false" under crds.podAnnotations

or

add curl -X POST http://localhost:15020/quitquitquit to the end of the args for the kubectl container within the crds job.

see this similar issue