Add garage helm chart wrapper

S3-compatible object store (dxflrs/garage), single-node by default with
hostPath/PVC persistence, existingSecret for rpc/admin/metrics tokens, and
a postStart hook that bootstraps the single-node layout automatically.
Tracks upstream via dockerhub-tags-pattern for scripts/update-charts.sh.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014ZA4cJygj4VPCYVms4TDrH

garage/templates/service.yaml

@@ -0,0 +1,29 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ include "garage.fullname" . }}
+  labels:
+    {{- include "garage.labels" . | nindent 4 }}
+spec:
+  type: {{ .Values.service.type }}
+  selector:
+    {{- include "garage.selectorLabels" . | nindent 4 }}
+  ports:
+    - name: s3-api
+      port: {{ .Values.service.s3ApiPort }}
+      targetPort: s3-api
+      protocol: TCP
+    - name: rpc
+      port: {{ .Values.service.rpcPort }}
+      targetPort: rpc
+      protocol: TCP
+    {{- if .Values.garage.web.enabled }}
+    - name: s3-web
+      port: {{ .Values.service.s3WebPort }}
+      targetPort: s3-web
+      protocol: TCP
+    {{- end }}
+    - name: admin
+      port: {{ .Values.service.adminPort }}
+      targetPort: admin
+      protocol: TCP