Add cloudhost-platform Helm chart and registry ingress manifests.

Deploy backend, frontend, PostgreSQL, and Redis on Kubernetes with optional Ingress/TLS, SQL migration hooks, and public registry exposure at repo.3fase.ir.

Co-authored-by: Cursor <cursoragent@cursor.com>

README.md

@@ -70,7 +70,8 @@ host/
 │   ├── Dockerfile
 │   ├── package.json
 │   ├── helm/
-│   │   └── cloudhost-app/   # Helm chart (all runtimes)
+│   │   ├── cloudhost-platform/  # Helm chart (control plane)
+│   │   └── cloudhost-app/       # Helm chart (user apps)
 │   │       ├── Chart.yaml
 │   │       ├── values.yaml
 │   │       └── templates/   # K8s manifest templates
@@ -147,7 +148,29 @@ docker compose up --build
 
 Backend at port 4000, Frontend at port 3000.
 
-### 4. Run Locally (development)
+### 4. Deploy Platform on Kubernetes (Helm)
+
+Prerequisites: NGINX Ingress, cert-manager (if TLS enabled), StorageClass for PVCs.
+
+```bash
+# Build images (set API URL to match ingress.api.host when TLS is on)
+export REG=your-registry.example.com
+docker build -t $REG/cloudhost-backend:latest ./backend
+docker build -t $REG/cloudhost-frontend:latest \
+  --build-arg NEXT_PUBLIC_API_URL=https://api.platform.example.com ./frontend
+docker push $REG/cloudhost-backend:latest $REG/cloudhost-frontend:latest
+
+# Install (copy and edit values-production.example.yaml first)
+helm upgrade --install cloudhost ./backend/helm/cloudhost-platform \
+  -n cloudhost --create-namespace \
+  -f backend/helm/cloudhost-platform/values-production.example.yaml
+```
+
+Key values: `ingress.enabled`, `ingress.tls.enabled`, `ingress.frontend.host`, `ingress.api.host`, `postgres.password`, `secrets.jwtSecret`.
+
+See chart defaults in `backend/helm/cloudhost-platform/values.yaml` and post-install notes via `helm get notes cloudhost -n cloudhost`.
+
+### 5. Run Locally (development)
 
 ```bash
 # Terminal 1 — Backend