WIP keycloak stack (gate probe)

platform/cnpg/helmrepository.yaml

@@ -0,0 +1,13 @@
+---
+# CloudNativePG — the PostgreSQL operator backing Keycloak's DR-critical database (ADR-0014).
+# Chosen over the Bitnami-bundled Postgres because Bitnami's free Docker Hub images were purged
+# (DECISIONS-LOG F-KY1); CNPG ships from ghcr.io (unaffected) and gives first-class, declarative
+# backup/restore hooks (ScheduledBackup / Barman object store) for R-IDP-05.
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: cloudnative-pg
+  namespace: cnpg-system
+spec:
+  interval: 1h
+  url: https://cloudnative-pg.github.io/charts