feat: add nebula resource limits and golden file scenario

Add configurable resource limits to nebula DaemonSet (200m/128Mi
limits, 50m/64Mi requests). Add nebula-enabled golden file scenario
covering the full nebula template rendering path.

Author: privsim

helm/disentangle/templates/nebula-daemonset.yaml

@@ -23,6 +23,10 @@ spec:
         - name: nebula
           image: "{{ .Values.nebula.image.repository }}:{{ .Values.nebula.image.tag }}"
           imagePullPolicy: {{ .Values.nebula.image.pullPolicy }}
+          {{- with .Values.nebula.resources }}
+          resources:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
           securityContext:
             capabilities:
               add: ["NET_ADMIN"]

helm/disentangle/values.yaml

@@ -104,6 +104,13 @@ nebula:
     repository: ghcr.io/disentangle-network/nebula-pq
     tag: "1.11.0-pq.1"
     pullPolicy: IfNotPresent
+  resources:
+    limits:
+      cpu: 200m
+      memory: 128Mi
+    requests:
+      cpu: 50m
+      memory: 64Mi
   # Mode: "lighthouse" or "node"
   mode: "node"
   # Overlay network CIDR - reserved for future networkpolicy/tun configuration