deploy: update sme service images to 048cb2c + bump chart to 1.4.158

products/catalyst/chart/Chart.yaml

@@ -1086,8 +1086,8 @@ name: bp-catalyst-platform
 # Fix #154 (HR-timeout audit). Those bumped the HelmRelease
 # install.timeout. This bumps the chart-INTERNAL wait loop budget
 # inside the pre-install hook Job, which is a different seam.
-version: 1.4.157
-appVersion: 1.4.157
+version: 1.4.158
+appVersion: 1.4.158
 # 1.4.141 (qa-loop Fix #185, prov #38/#39/#41 recurrence — pre-install
 # hook unscheduable on saturated worker):
 #

products/catalyst/chart/templates/sme-services/auth.yaml

@@ -24,7 +24,7 @@ spec:
           # contabo-mkt Flux Kustomization (Sovereigns skip via .helmignore),
           # so the image must be a concrete string. PR #580 templated it and
           # pinned the new ReplicaSet at InvalidImageName since 2026-05-02.
-          image: ghcr.io/openova-io/openova/services-auth:255eb3b
+          image: ghcr.io/openova-io/openova/services-auth:048cb2c
           imagePullPolicy: Always
           ports:
             - containerPort: 8081

products/catalyst/chart/values.yaml

@@ -247,7 +247,7 @@ images:
   admin:
     tag: "3c2f7e4"
   # All 10 SME microservices share one SHA tag (built from the same mono-repo commit).
-  smeTag: "255eb3b"
+  smeTag: "048cb2c"
 
 # ─── Runtime service coordinates (qa-loop iter-1, cluster
 # `catalyst-runtime-config-missing`) ────────────────────────────────────