chart: regenerate manifests/ate-install/ from current Helm chart

Re-runs `make helm-template` so the checked-in render matches the
chart. Brings in rustfs.yaml, the s3-backed atelet storage envvars,
the trimmed valkey manifest, and drops the no-longer-templated
sandboxconfig-gvisor and sandboxconfig-validation manifests.
`make verify-helm-template` now passes.

Author: jjamroga

manifests/ate-install/ate-api-server.yaml

@@ -101,6 +101,10 @@ spec:
         - "--session-id-jwt-pool=/run/session-id-jwt-pool/pool.json"
         - "--session-id-ca-pool=/run/session-id-ca-pool/pool.json"
         - "--workerpool-ca-certs=/run/workerpool-ca-certs/trust-bundle.pem"
+        # Pass the chart-resolved namespace so the atelet pod informer
+        # watches the correct namespace when substrate is installed as a
+        # subchart (the binary default is "ate-system").
+        - "--atelet-namespace=ate-system"
         env:
         - name: POD_NAME
           valueFrom:

manifests/ate-install/ate-controller.yaml

@@ -71,6 +71,13 @@ spec:
       containers:
       - name: ate-controller
         image: ko://github.com/agent-substrate/substrate/cmd/atecontroller
+        args:
+        # The atecontroller binary defaults --ateapi-conn-spec to
+        # dns:///api.ate-system.svc:443, which is correct only for the
+        # canonical render (release name "substrate" in namespace
+        # "ate-system"). Pass the chart-resolved Service so the controller
+        # dials the right backend when substrate is installed as a subchart.
+        - "--ateapi-conn-spec=dns:///api.ate-system.svc:443"
         ports:
         - name: metrics
           containerPort: 8080

manifests/ate-install/atenet-dns.yaml

@@ -170,6 +170,11 @@ spec:
         - "--log-level=debug"
         - "--interval=10s"
         - "--corefile-path=/etc/coredns/Corefile"
+        # Pass the chart-resolved names/namespace so the controller looks up
+        # the correct Services when substrate is installed as a subchart.
+        - "--system-namespace=ate-system"
+        - "--router-service-name=atenet-router"
+        - "--dns-service-name=dns"
         volumeMounts:
         - name: dns-config-volume
           mountPath: /etc/coredns

manifests/ate-install/atenet-router.yaml

@@ -161,6 +161,9 @@ spec:
         - "--standalone"
         - "--networking-mode=agentgateway"
         - "--namespace=ate-system"
+        # Pass the chart-resolved router Service name so /statusz looks up the
+        # correct Service when substrate is installed as a subchart.
+        - "--router-service-name=atenet-router"
         - "--port-http=8080"
         - "--port-extproc=50051"
         - "--extproc-address=127.0.0.1"