fix(runtime): upgrade ingress-nginx to 4.15.0

[plural-copilot]

Summary

• Current: runtime 0.1.36 with public and private (alias ingress-nginx-private) ingress-nginx chart dependencies at 4.14.1.
• Target: runtime 0.1.37 with both ingress-nginx dependencies at 4.15.0, which resolves to registry.k8s.io/ingress-nginx/controller:v1.15.0 for both enabled controllers.
• Regenerated Chart.lock and the vendored dependency using Helm; ingress-nginx-4.14.1.tgz is replaced by ingress-nginx-4.15.0.tgz.

EKS 1.35 blocker rationale

This is the focused ingress-nginx dependency upgrade required before upgrading the plrldemo management EKS cluster from Kubernetes 1.34 to 1.35. It intentionally changes neither Terraform nor live cluster state.

Release choreography

Publish runtime 0.1.37 first. Only after that release is published should downstream management configuration pin runtime 0.1.37; this PR deliberately contains no downstream pin update.

Validation gates

• Ingress/controllers: Helm dependency build/update and lint pass; a Kubernetes 1.35 render contains exactly two registry.k8s.io/ingress-nginx/controller:v1.15.0 controller images.
• Webhook/admission-related behavior: admission webhooks remain intentionally disabled. The render contains no ValidatingWebhookConfiguration and no --validating-webhook controller argument; validate controller/admission-related behavior after release consistent with that disabled state.
• Routing: the render preserves the public nginx and private internal-nginx IngressClass resources and their respective controller identities.
• Metrics and operational settings: the render preserves Prometheus scrape annotations, public/internal NLB service annotations, HPA settings, resource requests, topology spread constraints, and logging configuration.

Scope

Only runtime chart metadata, Helm-generated lock data, and the ingress-nginx vendored archive changed. Runtime values/configuration, Gatekeeper, Terraform, and unrelated charts are untouched.

Plural Service: mgmt/apps

[plural-copilot]

This PR was generated by the codex Plural Agent Runtime. Here's some useful information you might want to know to evaluate the ai's perfomance:

Name	Details
💬 Prompt	Create exactly one focused PR in this repository for the management EKS plrldemo 1.34->1.35 ingress-nginx upgrade blocker ONLY. Do not change Terraform or make cluster writes....
🔗 Run history	View run history