Update stacklok/toolhive-registry-server to v1.4.11 (#979)

* Update stacklok/toolhive-registry-server to v1.4.11

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Document global.postgres fallback from registry-server v1.4.11

The Helm chart at v1.4.11 adds a global.postgres.{host,port,sslMode}
fallback so umbrella charts can set the database host once instead of
repeating it per subchart. Cover the standalone Helm guide and the
enterprise platform deployment guide, parallel to the existing
global.redis docs.

* Tighten subchart fallback section in deploy-helm

- Clarify 'umbrella chart' instead of bare 'umbrella'
- 'Database host' is more accurate than 'database connection' since
  only host/port/sslMode are inherited
- Split the mid-sentence spaced hyphen into two sentences per the
  project style (spaced hyphens belong in list-style contexts, not
  prose)

* Frame subchart Postgres section as enterprise

Co-authored-by: Dan Barr <danbarr@users.noreply.github.com>

* docs(registry): use enterprise-context callout instead of gating badge for global.postgres

The global.postgres fallback is a generic Helm global.* mechanism usable by
any umbrella chart, not an enterprise-gated feature, so the EnterpriseBadge on
the section heading mislabeled it. Replace it with an :::enterprise context
callout that still routes full-platform users to the platform-wide PostgreSQL
defaults, and keep the section description OSS-neutral.

---------

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: Dan Barr <danbarr@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>

Author: 4 people

.github/upstream-projects.yaml

@@ -29,7 +29,7 @@
 projects:
   - id: toolhive-registry-server
     repo: stacklok/toolhive-registry-server
-    version: v1.4.10
+    version: v1.4.11
     docs_paths:
       - docs/toolhive/guides-registry
       - docs/toolhive/concepts/registry-criteria.mdx

docs/platform/enterprise-platform/deployment.mdx

@@ -289,6 +289,32 @@ override. When set, it takes precedence over `global.redis.host` and
 
 :::
 
+#### Global PostgreSQL defaults
+
+The Registry Server reads its database host, port, and SSL mode from
+`global.postgres` when its own
+`toolhive-registry-server.upstream.config.database.host` is empty. This is the
+same pattern as `global.redis` above, intended for umbrella deployments that
+share a PostgreSQL instance across several backing services. The block is
+optional: when `global.postgres.host` is empty, the default is inactive and each
+subchart uses its own `config.database` block.
+
+```yaml title="values.yaml (global PostgreSQL addition)"
+global:
+  postgres:
+    # When empty, the global default is inactive.
+    host: 'postgres.example.com'
+    port: 5432
+    sslMode: 'require'
+```
+
+Only `host`, `port`, and `sslMode` are inherited from the global block. The
+database user, database name, and credentials still go under the subchart's own
+`config.database` block (and `extraEnv` for the password Secret reference, as
+the example above shows). A locally set
+`toolhive-registry-server.upstream.config.database.host` always wins over
+`global.postgres.host`.
+
 ### 4. Install the chart
 
 Install the chart into the `stacklok-system` namespace you created earlier.

docs/toolhive/guides-registry/deploy-helm.mdx

@@ -73,6 +73,39 @@ config:
     sslMode: require
 ```
 
+### Share a database host across subcharts
+
+When the Registry Server chart runs as a subchart of an umbrella chart whose
+bundled services share a single PostgreSQL instance, you can set the database
+host once at the umbrella level under `global.postgres` instead of repeating it
+per subchart. This is a standard Helm `global.*` mechanism, so any umbrella
+chart can use it:
+
+```yaml title="values.yaml (umbrella excerpt)"
+global:
+  postgres:
+    host: 'postgres.example.com'
+    port: 5432
+    sslMode: 'require'
+```
+
+When `config.database.host` on the Registry Server subchart is empty, the chart
+falls back to `global.postgres.{host,port,sslMode}` (port defaults to `5432`). A
+locally set `config.database.host` always wins, so per-subchart overrides keep
+working. Only `host`, `port`, and `sslMode` are inherited. The `user`,
+`database`, and credentials still go in the subchart's own `config.database`
+block.
+
+:::enterprise
+
+If you run the full Stacklok Enterprise platform, its canonical umbrella chart
+already wires up `global.postgres`, so you set the shared database host once at
+the umbrella level rather than per subchart. See the
+[platform-wide PostgreSQL defaults](../../platform/enterprise-platform/deployment.mdx#global-postgresql-defaults)
+for the credential Secrets and the other components that read `global.postgres`.
+
+:::
+
 ## Provide database credentials
 
 Database credentials use the pgpass file pattern. Create a Kubernetes Secret