ci: clear proxy env in minio-bucket-init, capture seed pod logs on failure

pipelines/harbor/values.yaml

@@ -16,13 +16,16 @@ expose:
     controller: default
     className: traefik
     annotations:
-      cert-manager.io/cluster-issuer: letsencrypt-prod
+      cert-manager.io/cluster-issuer: celestium-le-production
       traefik.ingress.kubernetes.io/router.entrypoints: websecure
       ingress.kubernetes.io/ssl-redirect: "true"
       ingress.kubernetes.io/proxy-body-size: "0"
 
 externalURL: https://registry.celestium.life
 
+# Proxy CA cert for Squid SSL bump — required for proxy cache to reach Docker Hub/GHCR
+caBundleSecretName: harbor-ca-bundle
+
 # Initial admin password — change after first login
 harborAdminPassword: "St0nks0racl3!"
 
@@ -51,7 +54,7 @@ persistence:
       existingClaim: harbor-redis-pvc
       size: 2Gi
     trivy:
-      existingClaim: harbor-trivy-pvc
+      storageClass: longhorn
       size: 5Gi
 
 # Trivy vulnerability scanner