docs(helm): correct the metrics bindAddress override note

The earlier note suggested keeping `service.port` aligned with a
runtime override of `METRICS_BIND_ADDRESS`, but `service.port` is the
cluster-facing front-door port and has no effect on the Service
backend. The Service `targetPort` and the pod `containerPort` are both
derived from `bindAddress` at template time, so overriding the env var
via `controller.env` cannot move the rendered Service at all — that
operational consequence is what the comment now states, with
`bindAddress` flagged as the only chart-side knob that moves the
listener and the Service together.

Addresses review feedback on kagent-dev#1803.

Signed-off-by: Daniel Orbach <ddorbach@gmail.com>

Author: danielorbach

helm/kagent/values.yaml

@@ -229,14 +229,14 @@ controller:
   #   - name: OPENSHELL_GRPC_ADDR
   #     value: "openshell.my-namespace.svc.cluster.local:8080"
   # -- Prometheus-style /metrics endpoint for the controller manager.
-  # When enabled, provisions a dedicated metrics Service plus the ClusterRoles
-  # required for authenticated scrapes. Bind `<fullname>-metrics-reader` to
-  # your Prometheus ServiceAccount to grant scrape access. The Service
-  # targetPort and pod containerPort are derived from `bindAddress` so the
-  # two cannot drift; only the cluster-facing `service.port` is independently
-  # configurable. Overriding `METRICS_BIND_ADDRESS` via `controller.env`
-  # changes the runtime bind but not the Service — keep `service.port`
-  # aligned manually if you take that escape hatch.
+  # When enabled, provisions a dedicated metrics Service plus the
+  # ClusterRoles required for authenticated scrapes. Bind
+  # `<fullname>-metrics-reader` to your Prometheus ServiceAccount to grant
+  # scrape access. Use `bindAddress` for any port change: the Service
+  # `targetPort` and the pod `containerPort` are derived from it at
+  # template time, so overriding `METRICS_BIND_ADDRESS` via
+  # `controller.env` shifts only the runtime listener and leaves the
+  # rendered Service pointing at the chart-time port.
   # @default -- disabled
   metrics:
     enabled: false