feat(influxdb3-ent): add bootstrap token support

[alespour]

Closes #779

Wires up offline tokens bootstrap and admin token recovery into the chart. The values keys already existed but nothing was actually consuming them in the templates.

Now supported:

• Offline admin token at startup via security.auth.adminToken.existingSecret or .file
• Offline permission tokens via security.auth.permissionTokens.existingSecret or .file
• Binding the admin token recovery HTTP endpoint via security.auth.adminToken.recovery.httpBind

Two keys were re-nested for consistency:

Before	Now
security.auth.adminTokenFile	security.auth.adminToken.file
security.auth.permissionTokensFile	security.auth.permissionTokens.file

Notes to reviewers:

• The old flat keys were never wired to any template, so renaming them doesn't break anything at runtime.
• NOTES.txt stays minimal by design; token file-path modes aren't echoed there

Tests:

• adds resources in helm tests workflow for Ent V3 tests
• adds tests for admin token and permission tokens
• updates very outdated Helm in the workflow
• fixes ct install tests - exit code was not propagated outside pipe ❗

[Copilot]

Pull request overview

Copilot reviewed 16 out of 16 changed files in this pull request and generated 1 comment.

[bednar]

LGTM 🚀