feat(helm): move native Helm wait logic into an init container

[vigneshrajsb]

Summary

• move the native Helm prior-job wait loop out of the helm-deploy runner container
• run that coordination step in a fixed kubectl init container before Helm executes
• remove the apk/wget/jq assumptions from the custom Helm runner script
• keep native Helm image and post-renderer support unchanged

Why

Custom native Helm runner images should only need to satisfy the Helm execution contract. The prior implementation also required image-specific tooling for Kubernetes API polling, which broke otherwise valid custom images.

This change narrows the runner contract while preserving existing deploy behavior:

• clone-repo init container still handles repository checkout when needed
• ecr-auth init container still handles OCI registry auth when needed
• helm-deploy still performs repo/chart setup, registry login, and Helm execution
• a new wait-for-prior-deploys init container handles serialized deploy coordination

Verification

• pnpm exec jest src/server/lib/nativeHelm/__tests__/helm.test.ts --runInBand
• pnpm exec jest src/server/lib/config/__tests__/ConfigBuilder.test.ts --runInBand