- Use custom image registry (somegit.dev) with pull secrets and "latest" tag.
- Enable HTTPRoute with hostname "heatguard.dev" and TLS via cert-manager.
- Activate autoscaling with min/max replicas and resource metrics.
- Switch Dockerfile to Alpine runtime with nonroot user.
- Add helm directory to .dockerignore.
Add health endpoints (/healthz, /readyz), graceful shutdown with
SIGTERM/SIGINT handling, multi-stage Dockerfile with distroless
runtime, and a full Helm chart with security-hardened defaults.
