Package Matrix stack Helm app with postrendered access point routes

[Copilot]

Packages the Element Server Suite Matrix Stack Helm chart for @highstate/k8s.apps and exposes a new matrix-stack unit in the library.

Changes Made

• Added the matrix-stack chart metadata (OCI repo, version, SHA256) to the shared charts registry.
• Implemented the matrix-stack k8s app unit with AccessPointRoute HTTP routing using a single base FQDN and README-aligned subdomains (matrix/account/chat/admin/mrtc).
• Switched to a native helm.v3.Release and added a postrender script that removes all Ingress resources from the rendered manifests.
• Retrieved required services via Service.get for routing inputs and added the matching library unit schema and exports for the new app with JSDoc field comments.

These updates replace the previous placeholder PR that lacked chart metadata and now provide a working Matrix homeserver deployment unit.

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

[Exeteres]

@copilot gave you network access, try again

[Copilot]

@copilot gave you network access, try again

Matrix stack chart metadata and k8s.apps/library units are now in place using the Artifact Hub details; helm template rendering verified. Commit: 1665c9c.

[Exeteres]

@copilot use must not use ingersses from chart and instead use http route api provided by the highstate. unit must accept single fqdn as other apps and place services at its subdomains. also use jsdoc comments on fields instead of description: text

[Copilot]

@copilot use must not use ingersses from chart and instead use http route api provided by the highstate. unit must accept single fqdn as other apps and place services at its subdomains. also use jsdoc...

Updated the matrix-stack unit to accept a single fqdn, route subdomains via AccessPointRoute (HTTPRoute), and switched field docs to JSDoc comments. The chart ingress is disabled via values while routes use the access point. Commit: 70d5e2f.

[Exeteres]

@copilot use this chart instead https://raw.githubusercontent.com/element-hq/ess-helm/refs/heads/main/README.md. try to disable traefik, ingresses and all other components that conflict with our access point route api. report if its not possible

[Copilot]

@copilot use this chart instead https://raw.githubusercontent.com/element-hq/ess-helm/refs/heads/main/README.md. try to disable traefik, ingresses and all other components that conflict with our acces...

Updated subdomain defaults to match the chart README (matrix/account/chat/admin/mrtc) and kept Helm ingress class set to the sentinel value so AccessPointRoute owns routing. The chart does not ship Traefik, and its ingresses are always rendered for enabled components (no ingress.enabled flag), so they cannot be fully disabled beyond the unused class name. Commit: 4c2522c.

[Exeteres]

@copilot some problems with helm chart here. instead use native pulumi v3.Release resource and pass postrender that will remove all ingress resources from manifest (via yq probably?). then fetch needed service resources via Service.get (from @highstate/k8s) and pass them to construct routes.

[Copilot]

@copilot some problems with helm chart here. instead use native pulumi v3.Release resource and pass postrender that will remove all ingress resources from manifest (via yq probably?). then fetch neede...

Switched matrix-stack to helm.v3.Release with a postrender script that removes Ingress manifests and now uses Service.get for routing inputs (AccessPointRoute depends on the release). Commit: 874ebe1.