ArgoCD + post-install hook creates a circular dependency for keycloak-client-secret (bug/design gap)

registry/auth-server can't start without keycloak-client-secret, which is only created by the setup-keycloak post-install Helm hook Job. Under ArgoCD (which translates Helm hooks to its own PostSync phase, gated on all Sync-phase resources — including the app's own Ingress — reporting Healthy first), this creates a genuine deadlock: Ingress health depends on the pod running, the pod can't run without the secret, and the secret-creating hook won't run until Ingress is healthy. Worth flagging as an ArgoCD compatibility issue, since ArgoCD is one of the most common GitOps tools this chart would be deployed with.