Upgrade Flux and the audited Helm validation profile together #5851

🤖 Generated by the Agentic Engineer

Objective

Upgrade the deployed Flux distribution and its audited Helm validation profile together so required validation can use the matching current engine and toolchain.

Details

The maintainer approved including the matching platform upgrade in the CI repair. Audit Flux 2.10.0, helm-controller 1.7.1 and Helm 4.3.1 as one version-bound profile, including the actual published controller build metadata. Preserve source identity, approval, image-verification, render, rollout and recovery gates. Detailed scanner evidence stays in private local reports.

Checklist

• Verify official distribution, controller image/build, SDK and compiler identities.
• Update both declared cluster selectors and all consuming validation profiles consistently.
• Prove actual rendering, post-rendering, selectors, cache invalidation and refusal behavior.
• Re-run native dependency analysis on the resulting source and artifacts.
• Pass current-head CI and permitted substantive review before protected merge.
• Verify accepted main and deployed controller/health readback through the normal production path.

Dependencies

Part of #5843. Delivered through the existing consolidated candidate #5846; do not create a duplicate repair or waive parity checks.

Notes

A compiler-only bump is not the approved solution. If the current official controller cannot establish the required profile, retain that as a named blocker and prepare the smallest identity-bound repair with its native proof.