Gateway charts

Hardened Helm charts in the gateway category. Each deploys our hardened image pinned by its signed digest, with production defaults.