fix: register envoy-gateway OCI repo declaratively in argocd values

ArgoCD only builds a helm-pull command for oci:// sources when the repo is
registered with enableOCI: true; otherwise it falls back to classic --repo
handling, which errors on an oci:// URL. Registered via configs.repositories
in argocd's own values.yaml (Git-managed), Application source updated to
the bare host/path form ArgoCD expects for OCI repos.

bootstrap/apps/envoy-gateway.yaml

@@ -8,7 +8,7 @@ metadata:
 spec:
   project: default
   sources:
-    - repoURL: oci://docker.io/envoyproxy
+    - repoURL: docker.io/envoyproxy
       chart: gateway-helm
       targetRevision: "v1.7.1"
       helm:

manifests/argocd/values.yaml

@@ -18,6 +18,12 @@ global:
 configs:
   params:
     server.insecure: true   # TLS terminated at Envoy Gateway
+  repositories:
+    envoy-gateway-oci:
+      url: docker.io/envoyproxy
+      name: envoy-gateway-oci
+      type: helm
+      enableOCI: "true"
 
 server:
   replicas: 1