ci: CICD-сборка (Gitea Actions: bootJar → docker → helm-publish) + helm-чарт

- workflow на release published: bootJar, build-docker (media-mirror/*), helm-publish (9.9.9 → tag)
- helm: Chart.yaml placeholder 9.9.9, values, templates (deployment/service/configmap/secret)
- env: DB, S3, Jellyfin через secret

helm/templates/secret.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ $.Release.Name }}-{{ $.Chart.Name }}-secret
+type: Opaque
+data:
+  dbUser: {{ (required "DB user не установлен" $.Values.db.user) | b64enc | quote }}
+  dbPassword: {{ (required "DB password не установлен" $.Values.db.password) | b64enc | quote }}
+  accessKey: {{ (required "Accesskey не установлен" $.Values.app.s3.accessKey) | b64enc | quote }}
+  secretKey: {{ (required "Secretkey не установлен" $.Values.app.s3.secretKey) | b64enc | quote }}