chore(deps): Update charts and images to latest versions

Charts:
- kube-prometheus-stack 91.8.2 -> 92.3.0
- traefik 41.6.0 -> 41.7.1
- loki 18.13.7 -> 18.15.1
- alloy 1.13.0 -> 1.13.1
- sealed-secrets 2.19.1 -> 2.20.0
- cert-manager v1.21.1 -> v1.21.2
- cloudnative-pg 0.29.0 -> 0.29.1
- garage-ui 0.12.1 -> 0.13.0

Images:
- argo-cd v3.5.2 -> v3.5.5
- jellyfin 12.0 -> 12.2
- qbittorrent 5.2.3_v2.0.15-ls478 -> 5.2.4_v2.0.15-ls480
- busybox (garage init) 1.37.0 -> 1.38.0

argocd-apps/add-ons/alloy.yaml

@@ -124,7 +124,7 @@ spec:
                   path: /var/lib/alloy
                   type: DirectoryOrCreate
     repoURL: https://grafana.github.io/helm-charts
-    targetRevision: 1.13.0
+    targetRevision: 1.13.1
   syncPolicy:
     automated:
       prune: true

argocd-apps/add-ons/cert-manager.yaml

@@ -23,7 +23,7 @@ spec:
             featureGates:
               ExperimentalGatewayAPISupport: true
       repoURL: https://charts.jetstack.io
-      targetRevision: v1.21.1
+      targetRevision: v1.21.2
     - path: add-ons/cert-manager
       repoURL: https://gitea.whyredfire.dev/whyredfire/gitops.git
       targetRevision: main

argocd-apps/add-ons/cnpg.yaml

@@ -19,7 +19,7 @@ spec:
         config:
           clusterWide: true
     repoURL: https://cloudnative-pg.github.io/charts
-    targetRevision: 0.29.0
+    targetRevision: 0.29.1
   syncPolicy:
     automated:
       prune: true

argocd-apps/add-ons/kube-prometheus-stack.yaml

@@ -182,7 +182,7 @@ spec:
             testFramework:
               enabled: false
       repoURL: https://prometheus-community.github.io/helm-charts
-      targetRevision: 91.8.2
+      targetRevision: 92.3.0
     - path: add-ons/kube-prometheus-stack
       repoURL: https://gitea.whyredfire.dev/whyredfire/gitops.git
       targetRevision: main

argocd-apps/add-ons/loki.yaml

@@ -107,7 +107,7 @@ spec:
           write:
             replicas: 0
       repoURL: https://grafana-community.github.io/helm-charts
-      targetRevision: 18.13.7
+      targetRevision: 18.15.1
     - path: add-ons/loki
       repoURL: https://gitea.whyredfire.dev/whyredfire/gitops.git
       targetRevision: main

argocd-apps/add-ons/sealed-secrets.yaml

@@ -14,7 +14,7 @@ spec:
   source:
     chart: sealed-secrets
     repoURL: https://bitnami.github.io/sealed-secrets
-    targetRevision: 2.19.1
+    targetRevision: 2.20.0
   syncPolicy:
     automated:
       prune: true

argocd-apps/add-ons/traefik.yaml

@@ -62,7 +62,7 @@ spec:
                     name: wildcard-whyredfire-dpdns-org
                     group: ""
       repoURL: https://traefik.github.io/charts
-      targetRevision: 41.6.0
+      targetRevision: 41.7.1
     - path: add-ons/traefik
       repoURL: https://gitea.whyredfire.dev/whyredfire/gitops.git
       targetRevision: main