Fix chart image pulls for kloud-csi installs.

Use a valid livenessprobe tag, default the driver image to appVersion, add imagePullSecrets support, and publish GHCR packages as public after CI builds.

Co-authored-by: Cursor <cursoragent@cursor.com>

.github/workflows/release-chart.yaml

@@ -58,3 +58,10 @@ jobs:
           for chart in "${charts[@]}"; do
             helm push "$chart" "oci://ghcr.io/${owner}/charts"
           done
+
+      - name: Make OCI chart public
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          owner=$(echo "${GITHUB_REPOSITORY_OWNER}" | tr '[:upper:]' '[:lower:]')
+          gh api --method PATCH "/orgs/${owner}/packages/container/charts%2Fkloud-csi/visibility" -f visibility=public || true