Fix selfhosted Helm secret key collisions that broke GitLab PAT auth

[Copilot]

Selfhosted GitLab PATs configured via Helm were not being used when ca_path/insecure were also set. In the generated Secret, those fields were written to the token key, overwriting the PAT and causing registry auth failures.

• Helm template fix (selfhosted secret keys)

  • Corrected key mapping in templates/secret.yaml:
    • selfhosted.<name>.insecure now stores insecure
    • selfhosted.<name>.ca_path now stores ca_path
  • Previously both were incorrectly emitted as selfhosted.<name>.token.

• Regression coverage

  • Added a focused chart unit test in tests/secret_test.yaml for a selfhosted entry with:
    • token (GitLab-style PAT)
    • insecure
    • ca_path
  • Asserts all three keys are present and independently encoded in Secret data.

# before (incorrect)
selfhosted.<name>.token: <token>
selfhosted.<name>.token: <insecure>
selfhosted.<name>.token: <ca_path>

# after
selfhosted.<name>.token: <token>
selfhosted.<name>.insecure: <insecure>
selfhosted.<name>.ca_path: <ca_path>

[Copilot]

Copilot wasn't able to review any files in this pull request.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.