[Bug] Ingress annotations, tlsSecret - render invalid yaml

[hrabalvojta]

1. Ingress annotations: can render empty.
   If ingress.nginxIngressAnnotations=false and ingress.additionalAnnotations is empty, the template emits annotations: with no map content. That is invalid YAML.

2. Ingress TLS secret can be empty.
   With ingress.enabled=true and ingress.tls=true, secretName is set to {{ $ingress.tlsSecret }} even when empty (default). That produces an invalid Ingress.