nodered-mcp: add noderedInsecure for self-signed upstreams

Venus OS (Victron Cerbo GX) serves Node-RED on :1881 over HTTPS with a
self-signed certificate, so the server cannot reach it without waiving
verification -- it starts fine and then logs "could not detect Node-RED
version" while every tool fails. Exposes upstream's NODERED_INSECURE,
defaulted off.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

nodered-mcp/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: nodered-mcp
 description: MCP server exposing a Node-RED instance's admin API as agent tools (fgjcarlos/nodered-mcp)
 type: application
-version: 0.1.0
+version: 0.1.1
 appVersion: "0.7.2"
 annotations:
   version-source: github-release:fgjcarlos/nodered-mcp

nodered-mcp/templates/deployment.yaml

@@ -45,6 +45,8 @@ spec:
           env:
             - name: NODERED_URL
               value: {{ required "noderedURL is required" .Values.noderedURL | quote }}
+            - name: NODERED_INSECURE
+              value: {{ .Values.noderedInsecure | quote }}
             - name: MCP_READ_ONLY
               value: {{ .Values.readOnly | quote }}
             - name: MCP_HTTP_TOKEN

nodered-mcp/values.yaml

@@ -13,6 +13,11 @@ service:
 # The Node-RED admin API this server drives, e.g. http://node-red:1880
 noderedURL: ""
 
+# Skip TLS verification against noderedURL. Needed when Node-RED is served
+# over https with a self-signed certificate -- Venus OS (Victron Cerbo GX)
+# does exactly that on port 1881.
+noderedInsecure: false
+
 # Refuse every write tool (flow deploy, node install). Leave on unless the
 # agent is meant to change flows.
 readOnly: true