Address review on #3315:
- Name-length overflow no longer exits 1 (which would deadlock the platform
pre-upgrade hook for every tenant). Instead pin the pool's worker objects
with resource-policy=keep, skip the child HR, warn loudly, and continue.
- Copy only images.kubectl into the child values, not the parent's whole
images map (waitForKubeconfig/talosCsrSigner are undeclared in the schema).
- Note that the pre-upgrade window is not quiet (a parent HR edit mid-upgrade
renders the old chart and self-heals once the new artifact lands).
- Cover the adoption path directly: annotate keep + release-name, idempotent
skip, unexpected-owner refusal, and the 6-hex KMT anchor rejecting a sibling
pool's template.
Signed-off-by: Ivan Okhotnikov <xorokhotnikov@gmail.com>
Ivan Okhotnikov
386053ba8f