## What's Changed
* On-prem Helm charts: infra operators, RustFS store, data CRs, app umbrella
* DB migration image + pre-install/upgrade Helm hook
* On-prem delivery docs: install runbook, secrets, upgrade, preflight
* On-prem build, release-train, and air-gap bundle
* Standalone container build for the dashboard UI
* Drop local CTI producer pipeline (delivery-only CTI)
* sync platform/ and ui/ from core
* Copy code from arxignis repo, fix docker image (CBL-5)
* On-prem release candidate: a working air-gapped install, a verified bundler, and a release pipeline that runs (CBL-2)
* WIP: preflight registry writes, split assemble, and customer install docs (CBL-2)
* fix(release): mirror probe must not fetch blobs; sign only if unsigned
* rc.3 blocker fix + build every image natively per arch + bundler defaults to all arches
* fix(bundler): rc.4's 34 'bad signatures' were an auth failure, plus the bundler cleanup that followed
* fix(ci): fix retarget failure