Move secrets to HelmRelease values field

Secrets are now in the HelmRelease spec.values field.
This allows Flux to pass them directly to Helm during deployment.

Next step: Extract these to SOPS-encrypted Secret and use valuesFrom.

platform/mcp-servers/helmrelease.yaml

@@ -28,4 +28,24 @@ spec:
     cleanupOnFail: true
 
   values:
-    # Values from values.yaml in git will be automatically used
+    mcp-gateway:
+      gateway:
+        auth:
+          apiKeys:
+            - name: "n8n"
+              key: "d8c32225b3ae87fc3c58811ee171d8fb03d60ff1225000a9286785edb0af21a4"
+            - name: "admin"
+              key: "244a99ed30be843541cdfbeb07b9292e19e041956840ebb4b7a169a5904c88f5"
+    n8n-mcp:
+      n8nMCP:
+        n8n:
+          apiKey: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIyNWI4Njk4My0wOWQzLTRjMzAtOWQ0OC03OWQxOWMxZjc5Y2UiLCJpc3MiOiJuOG4iLCJhdWQiOiJwdWJsaWMtYXBpIiwiaWF0IjoxNzYzMDk2NDU4fQ.I9MhQ1THxAD-P4mfcZAl3qxpjoIYM61OD1BIILDyPUw"
+    github-mcp:
+      github:
+        token: "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"
+        owner: "caffeinetux"
+    gitea-mcp:
+      gitea:
+        url: "http://gitea-http.gitea.svc.cluster.local:3000"
+        token: "b8a17f45f86db1cb1924487189a2d8e3d298a611"
+        owner: "admin"