phase 15: helm chart for stonks-oracle deployment

.kiro/specs/stonks-oracle/tasks.md

@@ -142,22 +142,22 @@
   - Commit all current changes with message `phase 14-15: docker build validation and helm deployment`
   - Push to main branch
   - _Requirements: N1_
-- [ ] 15.2 Validate GitHub Actions workflow builds containers
+- [x] 15.2 Validate GitHub Actions workflow builds containers
   - Monitor the GitHub Actions run to confirm lint-and-test and build-services jobs succeed
   - Fix any CI failures and re-push if needed
   - _Requirements: N1_
-- [ ] 15.3 Create Helm chart for stonks-oracle deployment
+- [x] 15.3 Create Helm chart for stonks-oracle deployment
   - Create `infra/helm/stonks-oracle/Chart.yaml` with chart metadata
   - Create `infra/helm/stonks-oracle/values.yaml` with configurable image tags, replica counts, resource limits, and environment references
   - Create Helm templates for all deployments, services, configmap, secrets, ingress, and network policies from existing K8s manifests
   - Add imagePullSecrets configuration for GHCR private registry access
   - Add a template for a Kubernetes Secret of type `kubernetes.io/dockerconfigjson` for GHCR authentication
   - _Requirements: N1, 8.2_
-- [ ] 15.4 Configure GHCR image pull authentication on the cluster
+- [x] 15.4 Configure GHCR image pull authentication on the cluster
   - Create a `docker-registry` secret in the `stonks-oracle` namespace with GHCR credentials (using a GitHub PAT or deploy key)
   - Reference the imagePullSecret in all deployment specs via the Helm values
   - _Requirements: 8.2, N1_
-- [ ] 15.5 Deploy stonks-oracle to the cluster via Helm
+- [-] 15.5 Deploy stonks-oracle to the cluster via Helm
   - Run `helm install` or `helm upgrade --install` targeting the `stonks-oracle` namespace
   - Verify all pods reach Running/Ready state
   - Verify services and ingress endpoints are reachable