feat(chart): expose Odoo runtime knobs (B-1) — version 0.1.11

- Adds odoo.{workers,limitTime*,limitMemory*,maxCronThreads,serverWideModules,dbFilter,extraArgs} knobs
- New instance.odooArgs helper renders flags only when set
- Empty odoo block byte-identical to previous chart output

templates/odoo-deployment.yaml

@@ -401,24 +401,16 @@ spec:
           # for the SaaS UX we want one instance == one DB and never
           # show the manager. db-init has already created and bootstrapped
           # this DB, so Odoo opens it cleanly.
+          # Args list assembled by instance.odooArgs helper:
+          #   * hard baseline (-d, --db-filter, --addons-path, --proxy-mode)
+          #     encodes v3 deployment invariants (Traefik termination,
+          #     single-DB mode) — operators cannot drop these.
+          #   * runtime knobs from .Values.odoo.* (workers, limit_time_*,
+          #     server-wide modules, etc.) render only when set; null
+          #     keeps Odoo's internal defaults.
+          # See templates/_helpers.tpl and values.yaml `odoo:` block.
           args:
-            - "-d"
-            - "{{ .Values.instance.code }}"
-            - "--db-filter=^{{ .Values.instance.code }}$"
-            # addons-path always includes the shared addons mount —
-            # the platform-shim addon lives there even when the
-            # tenant has no extra addons. See platform-shim
-            # initContainer.
-            - "--addons-path=/usr/lib/python3/dist-packages/odoo/addons,{{ .Values.addonsMountPath }}"
-            # proxy-mode is mandatory in Tower's architecture — every
-            # Odoo runs behind Traefik (per-instance IngressRoute → TLS
-            # termination at the cluster Traefik). Without --proxy-mode
-            # Odoo ignores X-Forwarded-Proto and generates http:// URLs
-            # for assets / images / redirects, which the browser blocks
-            # as Mixed Content on the https:// page. Diagnosed during
-            # the havari-16 ARM migrate (2026-05-13). Safe default for
-            # every chart consumer.
-            - "--proxy-mode"
+            {{- include "instance.odooArgs" . | nindent 12 }}
           ports:
             - name: http
               containerPort: 8069