fix(ci): exclude Helm values files from kubeconform by name

The first validate run failed: k8s/temporal/helm-values.yaml has no `kind`
(it is Helm chart input, not a k8s object) and the `*-ha/values.yaml` path
filter didn't catch it. Exclude `values.yaml` + `helm-values.yaml` by name
instead — covers every Helm values file regardless of directory. Applied to
both the validate workflow and apply.yml's validate job + apply file list.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: mastermanas805

.github/workflows/apply.yml

@@ -67,7 +67,7 @@ jobs:
           curl -sSL "https://github.com/yannh/kubeconform/releases/download/${VER}/kubeconform-linux-amd64.tar.gz" \
             | tar -xz -C /usr/local/bin kubeconform
           mapfile -t FILES < <(find "${K8S_DIR}" -type f \( -name '*.yaml' -o -name '*.yml' \) \
-            ! -path '*-ha/values.yaml' | sort)
+            ! -name 'values.yaml' ! -name 'helm-values.yaml' | sort)
           kubeconform -strict -ignore-missing-schemas -kubernetes-version 1.31.0 -summary "${FILES[@]}"
 
   apply:
@@ -125,7 +125,7 @@ jobs:
             for e in "${EXCLUDE[@]}"; do [ "$f" = "$e" ] && skip=true && break; done
             $skip || KEEP+=("$f")
           done < <(find "${K8S_DIR}" -type f \( -name '*.yaml' -o -name '*.yml' \) \
-                     ! -path '*-ha/values.yaml' | sort)
+                     ! -name 'values.yaml' ! -name 'helm-values.yaml' | sort)
           echo "Will apply ${#KEEP[@]} manifest(s); excluded ${#EXCLUDE[@]} (secrets + service Deployments)."
           printf '%s\n' "${KEEP[@]}" > /tmp/apply-files.txt
           printf '  apply: %s\n' "${KEEP[@]}"

.github/workflows/validate.yml

@@ -66,14 +66,14 @@ jobs:
       - name: kubeconform schema validation
         run: |
           set -euo pipefail
-          # Exclude Helm values files (k8s/data/*-ha/values.yaml) — those
-          # are Helm chart inputs, not Kubernetes objects, so they have no
-          # k8s schema to check against.
+          # Exclude Helm values files (values.yaml / helm-values.yaml) —
+          # those are Helm chart inputs, not Kubernetes objects, so they
+          # have no `kind` and no k8s schema to check against.
           # -ignore-missing-schemas: CRDs (cert-manager, Cilium, CNPG)
           #   have no built-in schema; skip them rather than fail.
           # -strict: reject unknown/duplicate fields in core objects.
           mapfile -t FILES < <(find k8s -type f \( -name '*.yaml' -o -name '*.yml' \) \
-            ! -path '*-ha/values.yaml' | sort)
+            ! -name 'values.yaml' ! -name 'helm-values.yaml' | sort)
           echo "validating ${#FILES[@]} manifest(s):"
           printf '  %s\n' "${FILES[@]}"
           kubeconform \