kyverno 3.9.0 추가 — 자체 빌드 이미지 사용, 3.4.1 정리 (#57)

* kyverno 3.9.0(appVersion v1.19.0) 차트 추가 — 자체 빌드 이미지 사용

업스트림 이미지가 CVE 스캔 불가능한 베이스를 써서 자체 빌드로 대체한다(빌드 정의·근거는
hardened-containers). custom-values.yaml이 docker.io/paasup/* 7개 이미지를 가리키도록
고정했다.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

* kyverno 3.4.1 삭제
3.9.0 추가 후 정리

---------

Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>

manifests/helm/kyverno/3.9.0/charts/crds/values.yaml

@@ -0,0 +1,56 @@
+# -- Internal settings used with `helm template` to generate install manifest
+# @ignored
+templating:
+  enabled: false
+  debug: false
+  version: ~
+
+reportsServer:
+    # -- Kyverno reports-server is used in your cluster
+  enabled: false
+
+groups:
+  # -- Install CRDs in group `kyverno.io`
+  # -- This field can be overwritten by setting crds.labels in the parent chart
+  kyverno:
+    cleanuppolicies: true
+    clustercleanuppolicies: true
+    clusterpolicies: true
+    globalcontextentries: true
+    policies: true
+    policyexceptions: true
+    updaterequests: true
+
+  # -- Install CRDs in group `reports.kyverno.io`
+  policies:
+    validatingpolicies: true
+    imagevalidatingpolicies: true
+    namespacedimagevalidatingpolicies: true
+    namespacedvalidatingpolicies: true
+    namespaceddeletingpolicies: true
+    policyexceptions: true
+    mutatingpolicies: true
+    generatingpolicies: true
+    namespacedgeneratingpolicies: true
+    deletingpolicies: true
+
+  # -- This field can be overwritten by setting crds.labels in the parent chart
+  reports:
+    clusterephemeralreports: true
+    ephemeralreports: true
+
+  # -- Install CRDs in group `wgpolicyk8s.io`
+  # -- This field can be overwritten by setting crds.labels in the parent chart
+  wgpolicyk8s:
+    clusterpolicyreports: true
+    policyreports: true
+
+# -- Additional CRDs annotations
+# -- This field can be overwritten by setting crds.annotations in the parent chart
+annotations: {}
+  # argocd.argoproj.io/sync-options: Replace=true
+  # strategy.spinnaker.io/replace: 'true'
+
+# -- Additional CRDs labels
+# -- This field can be overwritten by setting crds.labels in the parent chart
+customLabels: {}