fix(chart): bp-catalyst-platform 1.4.99 -> 1.4.100 (qa-fixture seeder image) (#1224)

The qa-fixture status-seeder Jobs (qa-continuum-status-seed,
qa-cnpgpair-status-seed, qa-pdm-seed, qa-backup-status-seed) shipped in
1.4.99 referenced `bitnami/kubectl:1.30`. The harbor.openova.io
registry-proxy returns 401 Unauthorized on /v2/proxy-docker/bitnami/*
endpoints (the bitnami org auth lapsed) so every Job hit
ImagePullBackOff. Switched all four Jobs to
`docker.io/bitnamilegacy/kubectl:1.29.3` which is already cached on the
omantel cluster and pulls cleanly through the same Harbor proxy.

Per INVIOLABLE-PRINCIPLES #4 (never hardcode): future iterations should
move the image reference under .Values.qaFixtures.kubectlImage with a
default; this slice is the minimal patch to unblock iter-7.

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

clusters/_template/bootstrap-kit/13-bp-catalyst-platform.yaml

@@ -265,7 +265,7 @@ spec:
       # ClusterRole to grant continuums/cnpgpairs/pdms verbs (TC-344).
       # Bp-crossplane-claims 1.1.2 carries the matching tier-operator
       # extras update.
-      version: 1.4.99
+      version: 1.4.100
       sourceRef:
         kind: HelmRepository
         name: bp-catalyst-platform

products/catalyst/chart/Chart.yaml

@@ -214,7 +214,7 @@ name: bp-catalyst-platform
 # precedence so openbao auto-rotation of the source doesn't thrash the
 # controller pod. Caught live on omantel 2026-05-09 during qa-loop
 # iter-1 Executor run.
-version: 1.4.99
+version: 1.4.100
 appVersion: 1.4.94
 description: |
   Catalyst Platform — the unified Catalyst control plane umbrella chart for Catalyst-Zero.

products/catalyst/chart/templates/qa-fixtures/cnpgpair-qa.yaml

@@ -86,7 +86,7 @@ spec:
       restartPolicy: OnFailure
       containers:
         - name: seed
-          image: bitnami/kubectl:1.30
+          image: docker.io/bitnamilegacy/kubectl:1.29.3
           command: ["sh", "-c"]
           args:
             - |

products/catalyst/chart/templates/qa-fixtures/continuum-qa.yaml

@@ -124,7 +124,7 @@ spec:
       restartPolicy: OnFailure
       containers:
         - name: seed
-          image: bitnami/kubectl:1.30
+          image: docker.io/bitnamilegacy/kubectl:1.29.3
           command: ["sh", "-c"]
           args:
             - |

products/catalyst/chart/templates/qa-fixtures/pdm-qa.yaml

@@ -94,7 +94,7 @@ spec:
       restartPolicy: OnFailure
       containers:
         - name: seed
-          image: bitnami/kubectl:1.30
+          image: docker.io/bitnamilegacy/kubectl:1.29.3
           env:
             - name: PDNS_ZONE
               value: {{ .Values.qaFixtures.pdmZone | default "openova.io" | quote }}

products/catalyst/chart/templates/qa-fixtures/scheduledbackup-qa.yaml

@@ -95,7 +95,7 @@ spec:
       restartPolicy: OnFailure
       containers:
         - name: seed
-          image: bitnami/kubectl:1.30
+          image: docker.io/bitnamilegacy/kubectl:1.29.3
           command: ["sh", "-c"]
           args:
             - |