fix: use PGO secret for DATABASE_URL instead of SealedSecret

- Set postgresSecretRefName to empty to disable chat-postgree secret
- Add extraEnv to map chat-db-pguser-chatapi secret uri to DATABASE_URL
- PGO (CrunchyData) generates database credentials automatically

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

Author: justgithubaccount

tenants/product-team/apps/chat/overlays/dev/values.yaml

@@ -15,3 +15,14 @@ resources:
 ingress:
   enabled: true
   host: chat-dev.syncjob.ru
+
+# Disable SealedSecret for postgres (using PGO instead)
+postgresSecretRefName: ""
+
+# Use PGO-generated secret for DATABASE_URL
+extraEnv:
+  - name: DATABASE_URL
+    valueFrom:
+      secretKeyRef:
+        name: chat-db-pguser-chatapi
+        key: uri