derive helm action from release intent

[atkrad]

Summary

• Decide Helm install, upgrade, or none by comparing the previous release with the rendered manifest and hooks.
• Do not let live drift, a missing live object, or predictor output decide whether Helm runs.
• Skip namespace and Helm write prediction when Helm will not run, so the plan has no Helm write consequences for that invocation.

Related

Test plan

• Unit tests added/updated
• Scenario under scenarios/ (if behavior changes)
• nix run .#lint / pre-commit clean
• Manual smoke (command + expected result), if user-facing

Labels

• One of: kind/feature, kind/bug, kind/docs, kind/chore
• Add breaking-change if this breaks existing CLI or config behavior
• Add skip-changelog for internal-only PRs that should not appear in notes

Checklist

• Title is short and imperative (matches commit style)
• Docs / CLI help updated when user-facing (README.md, docs/cli/)
• No secrets or local-only paths in the diff

[codecov]

Codecov Report

❌ Patch coverage is 90.47619% with 10 lines in your changes missing coverage. Please review.
✅ All tests successful. No failed tests found.

Files with missing lines	Patch %	Lines
internal/plan/release_intent.go	88.88%	7 Missing ⚠️
internal/plan/semantic_build.go	88.46%	3 Missing ⚠️

📢 Thoughts on this report? Let us know!