fix: use configurable root credentials for dbinit job via values.yaml

dbInit.mysqlUser and dbInit.mysqlPasswordKey are now configurable in
values.yaml. Defaults to root/mysql-root-password since SQL migrations
need SUPER privilege for triggers with DEFINER=root@%.

App (hades-service) still connects as hades_user — only the migration
job uses root.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

hades/templates/job-dbinit.yaml

@@ -50,12 +50,12 @@ spec:
         - name: MYSQL_DATABASE
           value: {{ include "hades.databaseName" . | quote }}
         - name: MYSQL_USER
-          value: {{ include "hades.databaseUsername" . | quote }}
+          value: {{ .Values.dbInit.mysqlUser | default "root" | quote }}
         - name: MYSQL_PWD
           valueFrom:
             secretKeyRef:
               name: {{ include "hades.databaseSecretName" . }}
-              key: mysql-password
+              key: {{ .Values.dbInit.mysqlPasswordKey | default "mysql-root-password" }}
         command:
           - /bin/bash
           - -c

hades/values.yaml

@@ -166,6 +166,8 @@ mysql:
 # Automatically runs all SQL migration files from sql/ directory in alphabetical order
 dbInit:
   enabled: true
+  mysqlUser: "root"
+  mysqlPasswordKey: "mysql-root-password"
 
 # ConfigMap for application configuration files
 config: