fix(runtime): bump ingress-nginx chart deps to 4.15.0

[plural-copilot]

Summary

• bump the runtime chart ingress-nginx and ingress-nginx-private dependency pins from 4.14.1 to 4.15.0
• regenerate charts/runtime/Chart.lock and update the tracked runtime chart dependency artifact for internal consistency
• leave gatekeeper and all unrelated runtime dependencies/values unchanged

Evidence this is the mgmt runtime-owned path

• setup/runtime.yaml defines a ServiceDeployment named runtime with helm.chart: runtime and clusterRef.name: mgmt
• charts/runtime/Chart.yaml is the runtime chart and contains both ingress-nginx dependencies, including the aliased ingress-nginx-private entry
• charts/runtime/Chart.lock is the matching runtime lockfile and now records both ingress-nginx dependencies at 4.15.0

Gatekeeper intentionally not changed

• No mgmt runtime-owned gatekeeper dependency or runtime values pin exists in this repo path
• The only gatekeeper definition here is resources/policy/services/gatekeeper.yaml, which is a separate GlobalService, so it was intentionally left untouched

Verification

• ran helm dependency update for charts/runtime in Docker to refresh the lockfile/package artifact
• ran helm lint charts/runtime in Docker successfully

[plural-copilot]

This PR was generated by the codex Plural Agent Runtime. Here's some useful information you might want to know to evaluate the ai's perfomance:

Name	Details
💬 Prompt	Create a minimal safe PR in pluralsh/bootstrap to address the management-cluster runtime-owned EKS upgrade blocker for ingress-nginx only....
🔗 Run history	View run history