Component catch-up batch 1: external-dns 1.21, oauth2-proxy 10.x, Alloy 1.x, CNPG in-place flag

Co-Authored-By: Claude Opus 4.8 <[email protected]>

platform/cnpg/helmrelease.yaml

@@ -25,6 +25,11 @@ spec:
     remediation:
       retries: 3
   values:
+    # Avoid a full Postgres switchover on future operator minor bumps: update the instance-manager
+    # binary in place rather than recreating the pod (lands in the cnpg-controller-manager-config CM).
+    config:
+      data:
+        ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES: "true"
     # Single operator replica is plenty for a home cluster; it only reconciles CRs.
     replicaCount: 1
     resources: