tower 0.59.1 / tower-ui 0.60.0 — partial settings updates + per-card Save

Backend: UpdateTenantSettingsReq → pointer fields. Each card saves
only its own keys without clobbering the other card.

Frontend:
- 'Save Domain & DNS' button inside the Domain & DNS card
- 'Save Backups target' button inside the S3 card
- Wildcard host hidden behind 'Advanced — customize wildcard host'
  disclosure. Default is shown as read-only display under Domain so
  the operator sees what URLs their instances will land at.
- Removed the global Save settings button (each card now self-saves)

values.yaml

@@ -8,8 +8,7 @@ backend:
     # the docker-mirror-pull deploy token (read-only registry scope),
     # so every cluster that runs Tower needs the same imagePullSecret
     # provisioned out-of-band (until cluster-platform-v3 owns it).
-    repository: registry.odoosky.cloud/odoosky/docker-mirror/tower
+    tag: "0.59.1"
-    tag: "0.59.0"
     pullPolicy: IfNotPresent
   imagePullSecrets:
     - name: docker-mirror-pull
@@ -28,8 +27,7 @@ backend:
 frontend:
   enabled: true
   image:
-    repository: registry.odoosky.cloud/odoosky/docker-mirror/tower-ui
+    tag: "0.60.0"
-    tag: "0.59.1"
     pullPolicy: IfNotPresent
   imagePullSecrets:
     - name: docker-mirror-pull