argocd: add Image Updater annotations for auto-deploy

- management-service and queue-crd watch forgejo.riotpiao.com/rock/kmsvc-manage
- Uses newest-build strategy with SHA tag filter
- Fixed queue-crd image repo and branch (prod→main)

k8s/argocd/apps/04-management-service.yaml

@@ -5,6 +5,11 @@ metadata:
   namespace: sqs
   annotations:
     argocd.argoproj.io/sync-wave: "2"
+    # ArgoCD Image Updater - auto-update on new image push
+    argocd-image-updater.argoproj.io/image-list: svc=forgejo.riotpiao.com/rock/kmsvc-manage
+    argocd-image-updater.argoproj.io/svc.update-strategy: newest-build
+    argocd-image-updater.argoproj.io/svc.allow-tags: regexp:^[0-9a-f]{7}$
+    argocd-image-updater.argoproj.io/write-back-method: argocd
 spec:
   project: kmsvc
   source: