chore: use pgbouncer for connection pooling which handles crunchy failover better than prisma pool

[mishraomp]

---

Thanks for the PR!

Deployments, as required, will be available below:

• Frontend
• Backend

Please create PRs in draft mode. Mark as ready to enable:

• Analysis Workflow

After merge, new images are deployed in:

• Merge Workflow

[Copilot]

Pull Request Overview

This PR switches the database connection pooling to PgBouncer across the Helm charts and backend service, and updates deployment automation to use the latest Crunchy Postgres Operator action.

• Increase PgBouncer replicas and tune connection settings in charts/crunchy/values.yml
• Expose PGBOUNCER_URL via the app’s Kubernetes Secret and consume it in PrismaService
• Bump bcgov/action-crunchy GitHub Action to v1.2.3

Reviewed Changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

File	Description
charts/crunchy/values.yml	Increase replicas, bump maxConnections, add poolMode for PgBouncer
charts/app/templates/secret.yaml	Add PGBOUNCER_URL entry from secret data
backend/src/prisma.service.ts	Use PGBOUNCER_URL for Prisma data source with fallback to direct URL
.github/workflows/.deployer.yml	Upgrade bcgov/action-crunchy to v1.2.3

Comments suppressed due to low confidence (3)

charts/crunchy/values.yml:114

• [nitpick] Consider clarifying the rationale for increasing maxConnections to 100 and ensure this value, in combination with poolMode, does not exceed the Postgres server's max_connections setting. You might reference the server config or make it configurable.

      maxConnections: 100 # make sure less than postgres max connections

charts/crunchy/values.yml:115

• [nitpick] Add a comment explaining why 'transaction' was chosen for poolMode (vs. session or statement) to help future maintainers understand this setting.

      poolMode: 'transaction'

charts/app/templates/secret.yaml:19

• [nitpick] Consider renaming the variable to align with the secret key (e.g., $pgbouncerUri) or updating the secret field to pgbouncerUrl so naming is consistent and clear.

{{- $pgbouncerUrl = b64dec (get $secretData "pgbouncer-uri") }}