Setting `enabled: false` for already installed constraints does not remove the constraint

When you install a constraint, then update the enabled flag to false, it does not delete the constraint.

I think the problem is that the constraints are installed using post-upgrade hooks. This is because Gatekeeper creates CRDs from the constraint templates and must complete that process before constraints that use the CRDs are created.

But, when you disable a constraint, the upgrade hook disappears and Helm is not smart enough to know it should delete the constraint. Create and update work, but not delete.