ops: switch State Hub SBOM reads to Nexus

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a028f0-a42f-7582-89a8-ebaad7343834

deploy/railiance/apps/charts/state-hub/Chart.yaml

@@ -3,4 +3,4 @@ name: state-hub
 description: State Hub API service for private Railiance operation
 type: application
 version: 0.1.0
-appVersion: "main-697dd49"
+appVersion: "main-9851809"

deploy/railiance/apps/charts/state-hub/templates/deployment.yaml

@@ -14,6 +14,8 @@ spec:
       maxUnavailable: 0
   template:
     metadata:
+      annotations:
+        checksum/config: {{ include (print $.Template.BasePath "/configmap.yaml") . | sha256sum }}
       labels: {{- include "statehub.labels" . | nindent 8 }}
     spec:
       securityContext: {{- toYaml .Values.podSecurityContext | nindent 8 }}
@@ -94,4 +96,4 @@ spec:
       {{- end }}
       {{- with .Values.tolerations }}
       tolerations: {{- toYaml . | nindent 8 }}
-      {{- end }}
+      {{- end }}

deploy/railiance/apps/helm/state-hub-values.yaml

@@ -13,8 +13,8 @@ ingress:
 
 config:
   sbomNexusUrl: "http://sbom-nexus.sbom-nexus.svc.cluster.local:8010"
-  # T04 starts fail-safe. Change only this value to `nexus` after parity checks.
-  sbomNexusReadMode: legacy
+  # Reversible T04 read cutover; set back to `legacy` to roll back.
+  sbomNexusReadMode: nexus
 
 resources:
   # The single 4-core node currently has less than 250m unallocated. Keep enough