- external-secrets: deployed directly from its official Helm repo with installCRDs enabled. - openbao: deployed from the new openbao-gitops repo, providing the ClusterSecretStore that binds ESO to OpenBao. Also extends templates/application.yaml to support Helm-repo sources (source.chart) in addition to git path-based sources, and raw Helm values blocks. Co-authored-by: Copilot <[email protected]>