Adding Helm without breaking the contract: Chart version, image digest, same-batch promote

On top of the Maven/npm/Docker contract, treat Helm Charts as a fourth artifact on AngusRepo (repo.anguskit.com): align Chart version / appVersion / image tag·digest, split HTTP vs OCI credentials, and promote/rollback with the image as one batch.