feat(gitea): 准备 1.26.4 suspended 升级

apps/gitea/README.md

@@ -23,3 +23,7 @@ Gitea 是 Flux GitRepository 的上游。升级或重启期间 Git source 暂时
 
 跨 minor 的执行顺序、停机一致备份和失败恢复步骤见
 [`../../docs/gitea-upgrade-plan.md`](../../docs/gitea-upgrade-plan.md)。
+
+当前 Git desired state 已准备第一跳 chart `12.6.0` / Gitea `1.26.4`，但
+HelmRelease 保持 `suspend: true`。合并该准备状态不会运行 migration；必须先按升级
+计划取得停机一致备份，再通过只移除 suspend 的独立激活 PR 执行升级。

apps/gitea/helmrelease.yaml

@@ -11,7 +11,7 @@ spec:
       sourceRef:
         kind: HelmRepository
         name: gitea-charts
-      version: 12.5.3
+      version: 12.6.0
   driftDetection:
     mode: enabled
   install:
@@ -20,12 +20,21 @@ spec:
       retryInterval: 5m
   interval: 30m
   releaseName: gitea
+  suspend: true
   targetNamespace: gitea
   timeout: 15m
   upgrade:
     strategy:
       name: RetryOnFailure
       retryInterval: 5m
+  # Keep the patch release explicit because chart 12.6.0 defaults to 1.26.1.
+  # This override is in the suspended HelmRelease itself so chart, image and
+  # suspension are applied atomically; changing the watched values ConfigMap in
+  # the same revision could otherwise trigger reconciliation first.
+  values:
+    image:
+      rootless: true
+      tag: "1.26.4"
   valuesFrom:
     - kind: ConfigMap
       name: gitea-values