Declare the flex-auth secrets-engine release unit.

The shared chart emits railiance.io/release-unit only when releaseUnit is set, and only this release sets it. The claim names the live Deployment and its image digest.

RELREG-WP-0002-T01

Assistant: grok
Assistant-Session: 01a15f9f-3d77-7d21-911b-d93c86f9d14f

charts/flex-auth/templates/deployment.yaml

@@ -26,6 +26,9 @@ metadata:
   name: {{ include "flex-auth.name" . }}
   labels:
     {{- include "flex-auth.labels" . | nindent 4 }}
+    {{- with .Values.releaseUnit }}
+    railiance.io/release-unit: {{ . | quote }}
+    {{- end }}
 spec:
   {{- if .Values.outbox.enabled }}
   {{- $replicas := .Values.replicaCount }}