feat(helm): complete chart normalization with ConfigMap, HPA, and OCI migration

- Added debug mode, structured ConfigMap pattern, and README to all charts
- Migrated all flat-structure charts to hierarchical values under chartname key
- Fixed templates to use correct hierarchical paths
- Renamed helm-rustical key to rustical, added HPA support
- Fixed ingress YAML parsing (oxicloud), nested env vars (rustical)
- Pushed all normalized charts to OCI registry as 1.0.0+ and updated ArgoCD apps

k8s/argo-apps/helm-rustical.yaml

@@ -12,45 +12,51 @@ spec:
   sources:
     - repoURL: git.roboces.dev/catalin/fukuops
       chart: helm-rustical
-      targetRevision: 0.3.0
+      targetRevision: 1.1.1
       helm:
         valuesObject:
-          debug:
-            enabled: false
-          replicaCount: 1
-          service:
-            type: LoadBalancer
-            port: 8001
-            targetPort: 4000
-          ingress:
-            enabled: true
-            className: "traefik"
-            hosts:
-              - host: cal.roboces.dev
-                paths:
-                  - path: /
-                    pathType: Prefix
-          env:
-            RUSTICAL_OIDC__NAME: Authentik
-            RUSTICAL_OIDC__ISSUER: https://auth.fukurokuju.dev/application/o/rustical/
-            RUSTICAL_OIDC__CLAIM_USERID: preferred_username
-            RUSTICAL_OIDC__SCOPES: '["openid", "profile", "groups"]'
-            RUSTICAL_OIDC__ALLOW_SIGN_UP: "true"
-            RUSTICAL_FRONTEND__ALLOW_PASSWORD_LOGIN: false
-          persistence:
-            enabled: true
-            storageClass: "truenas-nfs-csi"
-            accessMode: ReadWriteMany
-            size: 50Gi
-          secret:
-            existingSecretName: rustical
-          resources:
-            requests:
-              cpu: 250m
-              memory: 256Mi
-            limits:
-              cpu: 500m
-              memory: 512Mi
+          rustical:
+            debug:
+              enabled: false
+            autoscaling:
+              enabled: true
+              minReplicas: 1
+              maxReplicas: 3
+              targetCPUUtilizationPercentage: 80
+              targetMemoryUtilizationPercentage: 80
+            service:
+              type: LoadBalancer
+              port: 8001
+              targetPort: 4000
+            ingress:
+              enabled: true
+              className: "traefik"
+              hosts:
+                - host: cal.roboces.dev
+                  paths:
+                    - path: /
+                      pathType: Prefix
+            config:
+              oidc.name: Authentik
+              oidc.issuer: https://auth.fukurokuju.dev/application/o/rustical/
+              oidc.claim_userid: preferred_username
+              oidc.scopes: '["openid", "profile", "groups"]'
+              oidc.allow_sign_up: "true"
+              frontend.allow_password_login: false
+            persistence:
+              enabled: true
+              storageClass: "truenas-nfs-csi"
+              accessMode: ReadWriteMany
+              size: 50Gi
+            secret:
+              existingSecretName: rustical
+            resources:
+              requests:
+                cpu: 250m
+                memory: 256Mi
+              limits:
+                cpu: 500m
+                memory: 512Mi
   project: roboces
   syncPolicy:
     automated: