How to use a private Helm chart repository: from install to HTTP/OCI push and install

After self-hosting, wire Helm: create HOSTED, separate HTTP vs OCI credentials, smoke-test with a minimal chart, and fix 401 and missing charts.