Unify chart and image release into a single tag-triggered workflow

.github/workflows/image-release.yml → .github/workflows/release.yml

@@ -1,4 +1,5 @@
-name: Build to GHCR
+name: Release
+
 on:
   push:
     tags:
@@ -134,3 +135,32 @@ jobs:
           outputs: type=image,name=target,annotation-index.org.opencontainers.image.description=piggy-webhooks for mutating pods
           cache-from: type=gha
           cache-to: type=gha,mode=max
+
+  release-chart:
+    runs-on: ubuntu-latest
+    permissions:
+      packages: write
+      contents: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+
+      - name: Configure Git
+        run: |
+          git config user.name "$GITHUB_ACTOR"
+          git config user.email "$GITHUB_ACTOR@users.noreply.github.com"
+
+      - name: Install Helm
+        uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4.3.1
+        with:
+          version: v3.13.0
+
+      - name: Run chart-releaser
+        uses: helm/chart-releaser-action@cae68fefc6b5f367a0275617c9f83181ba54714f # v1.7.0
+        with:
+          charts_dir: charts
+        env:
+          CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"