remove nersc.org from tls request

[dingp]

No description provided.

[Copilot]

Pull request overview

Updates the tls-acme Helm chart configuration/docs to stop requesting TLS certificates that include the default Spin hostname (i.e., avoid including *.svc.spin.nersc.org in certificate SANs), while keeping the default Spin host as an ingress route.

Changes:

• Remove the default Spin hostname from the Ingress TLS hosts list so it is excluded from certificate SANs.
• Update the TLS chart values template, README, and helper script defaults to reflect “user-facing domains only” for certificate requests.
• Add AGENTS.md contributor guidelines for linting/testing workflows.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
tls-acme/values_template.yaml	Clarifies intended separation between ingress hosts and certificate SAN host list in the values template.
tls-acme/templates/ingress.yaml	Drops auto-added default Spin hostname from the TLS SAN host list while keeping it as an ingress rule.
tls-acme/README.md	Updates behavior description to note default Spin hostname remains routed but excluded from certificate SANs.
tls-acme/prepare-values.sh	Adjusts generated domain_list default to exclude the default Spin hostname.
AGENTS.md	Adds repo-wide contribution/testing guidance and local lint commands.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.