chore(release): prepare v3.14.0 Helm charts

[flemzord]

Summary

• bump the operator and operator-crds Helm charts to 3.14.0
• set both application versions to v3.14.0
• regenerate the operator chart dependency lock

Impact

This prepares the next minor Operator release. It does not create the Git tag or publish release artifacts; those remain post-merge steps.

Validation

• nix develop --impure --command just pre-commit
• nix develop --impure --command just tests
• helm lint --strict and helm template for both charts

[NumaryBot]

✅ Approve — automated review

The chart and application versions are consistently updated to 3.14.0, and the regenerated dependency lock resolves the matching CRD chart version.

No findings.

[shipfox-ai]

Final Review — PR #534: chore(release): prepare v3.14.0 Helm charts

Summary. This is a pure release-preparation version bump of the Helm charts from 3.13.4 to 3.14.0. I independently verified every substantive claim from both reviews against the working tree: helm/crds/Chart.yaml and helm/operator/Chart.yaml both carry version: "3.14.0" / appVersion: "v3.14.0"; helm/operator/Chart.lock locks operator-crds at 3.14.0 (with matching digest/timestamp); the operator chart's dependency constraint version: "3.X" is satisfied by 3.14.0; a repo-wide grep for 3.13.4 across yaml/yml/lock/md/tpl returns no matches; and helm/operator/templates/deployment.yaml:35 and :65 correctly default the image tag and --utils-version to .Chart.AppVersion, with values.yaml leaving tag: "" so the bump drives the deployed versions. The two reviews agree and report no defects; that assessment holds up. Overall recommendation: approve.

Confirmed findings

No material finding was confirmed. The change is internally consistent, contains no leftover old-version references, and introduces no correctness, security, compatibility, or test-coverage risk. Reviewer A's remaining points (images must be published post-merge; the machine-generated Chart.lock digest could not be recomputed without a helm binary) are informational and not defects — the publish ordering is the standard release flow, and the locked dependency version/repository are consistent with the Chart.yaml changes.

---

Reviewed by Claude (claude-opus-4.8) and Codex (gpt-5.6-sol) via Shipfox; verified and synthesized by Claude.