Enhance post-upgrade batch job to delete all items not enabled instead of all items that are disabled

One potential problem is if we delete or rename a constraint, the value changes and the post-upgrade cleanup misses it. We could keep a list of deprecated constraints in the values file. But, I think a better solution is to use kubectl to get a list of all constraints and check if they are in the enabled list. If they are not, delete them. That way we clean up any leftovers that aren't in our list anymore.