dbInit.mysqlUser and dbInit.mysqlPasswordKey are now configurable in values.yaml. Defaults to root/mysql-root-password since SQL migrations need SUPER privilege for triggers with DEFINER=root@%. App (hades-service) still connects as hades_user — only the migration job uses root. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>