[linkstack] Chart Update

[mvprowess]

Version path: 4.8.0 → 4.8.6

⚠️ License annotation bug: This chart currently declares MIT but LinkStack has been AGPL-3.0 since v4.0.0.

Changes required:

• Change artifacthub.io/license from MIT → AGPL-3.0
• Change org.opencontainers.image.licenses from MIT → AGPL-3.0
• Add blocks/ directory to PersistentVolume mounts in values (new modular blocks system)
• Add note to README/NOTES.txt: versions 4.8.0–4.8.3 contained a critical bug that permanently deleted the themes/ directory on each update run — 4.8.4 fixes this; also contained a critical file upload security vulnerability fixed in 4.8.4
• Bump appVersion and image digest to 4.8.4
• Bump chart version to 1.0.0

[github-actions]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[github-actions]

false

[mvprowess]

Landed in #97 (still running CI, plus one follow-up commit for the org.opencontainers.image.licenses annotation that got missed in the first pass). Chart 0.4.0. A couple of notes:

• No dedicated blocks/ PV mount was needed - the whole linkstack.data.rootPath (/htdocs by default) is already mounted as a single PVC, and blocks/ just lives as a subdirectory under that same path like themes/ does.
• Couldn't verify the "critical file upload security vulnerability fixed in 4.8.4" claim against the actual v4.8.4 release notes - only the themes-directory corruption bug is documented there. Left that specific claim out of the README note rather than repeat something unverified; the corruption bug itself is documented.
• Target ended up at 4.8.6 (current latest) rather than 4.8.4 - everything in between was security/dependency patches and UI-only additions, nothing that touches this chart's env vars or behavior.
• Also discovered LinkStack doesn't publish semver image tags at all, only latest - kept the existing tag: latest + pinned image.digest approach and just moved the digest forward.

Chart version bump to 1.0.0 intentionally left open until this has had some real-world use post-update.