* Fix production pipeline and simplify helm publish logic

Problem: User should be able to configure Endpoint picker connection flags

Solution: Adds command line support for endpoint picker flags

…#4218)

…status (#4214) (#4239)

When HPA is enabled, read the current Deployment.Spec.Replicas directly
instead of HPA.Status.DesiredReplicas, which is eventually consistent and
lags behind deployment changes. This prevents the controller from
overwriting HPA's replica count with stale values, eliminating pod churn
and connection drops.

Fixes race condition where HPA scales down → NGF reads stale HPA status
→ NGF overwrites deployment with old replica count → pods restart.

…4246)

Fix bug where user mounted files were being removed by agent.

Problem: User mounted files are being removed by nginx agent.

Solution: Mark user mounted files as unmanaged so nginx agent doesn't remove them. To do so we use agent's UpdateOverview function to get all files referenced in the nginx conf. We compare that with the user added volumeMounts and mark any files that were user mounted as unmanaged, ensuring nginx agent doesn't remove them.

Testing: Added unit tests and manual testing.

Problem: When the Inference Extension was enabled, the additional container was not given resource specifications, which prevented the HPA from working.

Solution: Add the resource specifications from the NGINX container to the inference container.

| datasource | package             | from | to             |
| ---------- | ------------------- | ---- | -------------- |
| docker     | redhat/ubi9-minimal | 9.6  | 9.7-1762180032 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

| datasource  | package     | from   | to     |
| ----------- | ----------- | ------ | ------ |
| github-tags | nginx/agent | v3.4.2 | v3.5.0 |



* Update README and go.mod

* Update tests go.mod

* Fix incompatibility

---------

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…#4279) (#4281)

| datasource | package                                  | from    | to      |
| ---------- | ---------------------------------------- | ------- | ------- |
| docker     | quay.io/operator-framework/helm-operator | v1.41.1 | v1.42.0 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Problem: Need to allow disabling cert-generator with a Helm value.

Solution: Allow disabling cert-generator with a Helm value.

Testing: Allow disabling cert-generator with a Helm value.

Co-authored-by: Fabian Bao <[email protected]>

Co-authored-by: nginx-bot <[email protected]>
Co-authored-by: Saylor Berman <[email protected]>