feat: add Helm chart publishing workflow to release process

.github/workflows/release.yaml

@@ -79,3 +79,43 @@ jobs:
           gh release upload "$VERSION" --clobber \
             bin/kelos-* \
             bin/checksums.txt
+
+  publish-helm-chart:
+    if: startsWith(github.ref, 'refs/tags/v')
+    runs-on: ubuntu-latest
+    needs: release
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install Helm
+        uses: azure/setup-helm@v4
+        with:
+          version: 3.20.1
+
+      - name: Determine version
+        id: version
+        run: |
+          # Extract version without 'v' prefix (e.g., v1.2.3 -> 1.2.3)
+          VERSION=${GITHUB_REF#refs/tags/v}
+          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+
+      - name: Login to GHCR
+        run: |
+          helm registry login ghcr.io \
+            -u ${{ github.actor }} \
+            -p ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Package Helm chart
+        run: |
+          mkdir -p /tmp/charts
+          helm package internal/manifests/charts/kelos \
+            --version ${{ steps.version.outputs.version }} \
+            --app-version ${{ github.ref_name }} \
+            --destination /tmp/charts
+
+      - name: Push Helm chart to GHCR
+        run: |
+          helm push /tmp/charts/kelos-${{ steps.version.outputs.version }}.tgz oci://ghcr.io/kelos-dev/charts