chore: add default resources, auth/encryption config, and improve docs (#88)

* chore: add default resources, auth/encryption config, and improve docs

- Add default resource requests/limits for Sourcebot (2 CPU/4Gi),
  PostgreSQL (2 CPU/4Gi), and Redis (1 CPU/1.5Gi)
- Add sourcebot.authSecret and sourcebot.encryptionKey fields to
  values.yaml so users can configure secrets directly or via
  existing secret references
- Fix PostgreSQL secretKeys defaults to match Bitnami-generated
  key names (password/postgres-password), fixing upgrade failures
- Fix Redis subchart key from master to primary to match Bitnami
  Valkey chart
- Move sourcebot config to standalone config.json with --set-json
- Update values schema with explicit resources properties
- Rewrite README with installation steps, persistence section,
  sizing guidance, and examples
- Add CONTRIBUTING.md with local dev workflow

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* changelog

* feedback

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: brendan-kellam

CHANGELOG.md

@@ -0,0 +1,16 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+### Added
+- Added default resource requests/limits for Sourcebot (2 CPU/4Gi), PostgreSQL (2 CPU/4Gi), and Redis (1 CPU/1.5Gi). [#88](https://github.com/sourcebot-dev/sourcebot-helm-chart/pull/88)
+- Added `sourcebot.authSecret` and `sourcebot.encryptionKey` fields to values.yaml, supporting both direct values and existing secret references. [#88](https://github.com/sourcebot-dev/sourcebot-helm-chart/pull/88)
+
+### Fixed
+- Fixed PostgreSQL `secretKeys` defaults to match Bitnami-generated key names (`password`/`postgres-password`), fixing helm upgrade failures. [#88](https://github.com/sourcebot-dev/sourcebot-helm-chart/pull/88)
+- Fixed Redis subchart key from `master` to `primary` to match Bitnami Valkey chart (resources were not being applied). [#88](https://github.com/sourcebot-dev/sourcebot-helm-chart/pull/88)

CONTRIBUTING.md

@@ -0,0 +1,64 @@
+# Contributing
+
+## Local Development
+
+### Prerequisites
+
+- [Helm 3.x](https://helm.sh/docs/intro/install/)
+- A local Kubernetes cluster (e.g., [minikube](https://minikube.sigs.k8s.io/docs/start/)). The default resource requests require at least 12GB of memory. For minikube, configure this before creating your cluster:
+  ```bash
+  minikube config set memory 12288  # 12GB
+  ```
+
+### Building Dependencies
+
+Fetch the subchart dependencies (PostgreSQL, Valkey). You only need to re-run this when the dependencies in `Chart.yaml` are updated:
+
+```bash
+helm dependency build ./charts/sourcebot
+```
+
+### Deploying Locally
+
+Apply the secrets and deploy the minimal installation example:
+
+```bash
+kubectl apply -f examples/minimal-installation/secrets.yaml
+helm upgrade --install sourcebot ./charts/sourcebot \
+  -f examples/minimal-installation/values.yaml \
+  --set-json "sourcebot.config=$(cat examples/minimal-installation/config.json)"
+```
+
+Port forward to access Sourcebot at http://localhost:3000:
+
+```bash
+kubectl port-forward svc/sourcebot 3000:3000
+```
+
+### Validating Changes
+
+Lint the chart:
+
+```bash
+helm lint ./charts/sourcebot -f ./charts/sourcebot/values.lint.yaml
+```
+
+Render templates locally without deploying:
+
+```bash
+helm template sourcebot ./charts/sourcebot -f ./charts/sourcebot/values.lint.yaml
+```
+
+Run the chart tests:
+
+```bash
+helm test sourcebot
+```
+
+### Updating Docs
+
+The chart README is auto-generated from `values.yaml` comments using [helm-docs](https://github.com/norwoodj/helm-docs). After modifying `values.yaml`, regenerate the docs:
+
+```bash
+helm-docs --chart-search-root ./charts
+```