Changelog

• Added: Add optional image digest support for immutable image pulls

• Fixed: Fix secret namespace using release namespace instead of undefined value

• Fixed: Align schema default values with actual values.yaml defaults

• Fixed: Fix supplementalGroups schema title typo

• Fixed: Fix notContains test assertion on scalar field to use isNull

• Fixed: Fix NOTES.txt to use configurable service port in port-forward instructions

• Fixed: Use @deprecated marker convention for dicovertUrl field

• Fixed: Enable readOnlyRootFilesystem and add built-in tmp emptyDir volume