Install ToolHive operator via ArgoCD

Co-Authored-By: Claude Opus 4.8 <[email protected]>

manifest/overlays/production/helm-values/values.yaml

@@ -0,0 +1,13 @@
+# Values for the toolhive-operator Helm chart
+# (oci://ghcr.io/stacklok/toolhive/toolhive-operator), supplied to the Argo CD
+# multi-source ApplicationSet via $values. Validated as Helm values, not as a
+# Kubernetes manifest.
+#
+# The operator runs in toolhive-system but must watch + reconcile MCPServer
+# resources in the mcp-services namespace, so RBAC stays cluster-scoped (the
+# chart default). To restrict it, set scope: namespace and list namespaces.
+
+operator:
+  rbac:
+    scope: cluster
+    allowedNamespaces: []