argocd: add Image Updater annotations for auto-deploy

- management-service and queue-crd watch forgejo.riotpiao.com/rock/kmsvc-manage
- Uses newest-build strategy with SHA tag filter
- Fixed queue-crd image repo and branch (prod→main)

k8s/argocd/apps/03-queue-crd.yaml

@@ -5,11 +5,16 @@ metadata:
   namespace: sqs
   annotations:
     argocd.argoproj.io/sync-wave: "2"
+    # ArgoCD Image Updater - auto-update on new image push
+    argocd-image-updater.argoproj.io/image-list: op=forgejo.riotpiao.com/rock/kmsvc-manage
+    argocd-image-updater.argoproj.io/op.update-strategy: newest-build
+    argocd-image-updater.argoproj.io/op.allow-tags: regexp:^[0-9a-f]{7}$
+    argocd-image-updater.argoproj.io/write-back-method: argocd
 spec:
   project: kmsvc
   source:
     repoURL: https://forgejo.riotpiao.com/rock/kmsvc-manage.git
-    targetRevision: prod
+    targetRevision: main
     path: k8s/charts/queue-crd
     helm:
       values: |
@@ -17,9 +22,7 @@ spec:
         kafkaBrokers: "kmsvc-kafka-bootstrap.sqs.svc.cluster.local:9092"
         redisAddr: "kmsvc-redis-master.sqs.svc.cluster.local:6379"
         image:
-          repository: forgejo.riotpiao.homelab.com/rock/kafka-management-service-queue-operator
-          # CI (.forgejo/workflows/release.yaml) writes the released git tag
-          # here and pushes the commit -- ArgoCD picks it up on its next sync.
+          repository: forgejo.riotpiao.com/rock/kmsvc-manage
           tag: latest
   destination:
     server: https://kubernetes.default.svc

k8s/argocd/apps/04-management-service.yaml

@@ -5,6 +5,11 @@ metadata:
   namespace: sqs
   annotations:
     argocd.argoproj.io/sync-wave: "2"
+    # ArgoCD Image Updater - auto-update on new image push
+    argocd-image-updater.argoproj.io/image-list: svc=forgejo.riotpiao.com/rock/kmsvc-manage
+    argocd-image-updater.argoproj.io/svc.update-strategy: newest-build
+    argocd-image-updater.argoproj.io/svc.allow-tags: regexp:^[0-9a-f]{7}$
+    argocd-image-updater.argoproj.io/write-back-method: argocd
 spec:
   project: kmsvc
   source: