feat(telemetry): add telemetry.enabled toggle with GHCR fallback and engine opt-out

[dig-whois]

Summary

• Adds a top-level telemetry.enabled value (default true), mirroring the firebolt-operator chart's single-toggle opt-out.
• When set to false, the chart stamps DO_NOT_TRACK=1 on every engine container — disabling the engine's once-daily anonymous usage event (firebolt-analytics/packdb#24471) — and, when engineSpec.image.repository is still the default Scarf gateway, switches engine pulls to ghcr.io/firebolt-db/engine. A user-supplied repository is used verbatim, and a DO_NOT_TRACK entry in engineSpec.extraEnv still wins (it renders after the chart-managed env).
• Documents the toggle in the README Telemetry section, quickstart, and image-overrides docs; chart README regenerated with helm-docs.
• Chart validation now asserts all three render states: default (Scarf gateway, no DO_NOT_TRACK), opt-out (GHCR + DO_NOT_TRACK=1), and opt-out with a custom repository (repository preserved).

Test plan

• ./helm/scripts/validate-chart.sh green, including the new toggle assertions
• CI

---

Note

Low Risk
Chart-only behavior behind an opt-in default; changes engine env and image URL only when users set telemetry.enabled=false, with validation guarding regressions.

Overview
Introduces a top-level telemetry.enabled chart value (default true) so installs can opt out of anonymous engine usage telemetry in one place.

When telemetry.enabled: false, the chart sets DO_NOT_TRACK=1 on engine containers (before engineSpec.extraEnv, so a user override still wins) and routes default engine image pulls from the Scarf gateway to ghcr.io/firebolt-db/engine via a new fbinstance.engineImage helper—only when the repository is still the default; custom mirrors are unchanged. values.schema.json, helm-docs, README, quickstart, and image-overrides docs describe the toggle and related opt-out paths.

validate-chart.sh gains Step 4: default render (Scarf image, no DO_NOT_TRACK), full opt-out (GHCR + DO_NOT_TRACK), and opt-out with a custom repository preserved. .legitignore adds an entry for the validation dummy PostgreSQL password.

^{Reviewed by Cursor Bugbot for commit 2e10bc9. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Current version of PR was reviewed by /review-bugbot on Jul 28, 13:23 GMT+2. It flagged 0 findings.

^{Bugbot on commit 17402ca is skipped.}

[cursor]

Stale comment

Risk: medium. Left a non-blocking comment — Cursor Bugbot completed as skipped, so the required automated-review signal is incomplete and this cannot be auto-approved. Assigned gm42 and fstr for human review of the telemetry toggle and image-fallback behavior.

  

_{Sent by Cursor Approval Agent: Infra Reviewer}

[fireboltdb-docs-integration]

Mintlify docs preview

Docs were aggregated into the Firebolt documentation site.

Status	Preview	Updated (UTC)
🟢 Ready	View Preview	Jul 29, 2026, 12:08 PM

• Packdb PR (draft): https://github.com/firebolt-analytics/packdb/pull/24473
• Aggregate branch: aggregate/helm-docs-pr-53

Mintlify may take a few minutes to finish building. This comment updates on each sync while the source PR is open.

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit ba298c1. Configure here.}

[cursor]

Stale comment

Risk: medium. Left a non-blocking comment — Cursor Bugbot completed as skipped/neutral with 1 unresolved finding, so this cannot be auto-approved. Reviewers were already assigned; no additional reviewers requested.

  

_{Sent by Cursor Approval Agent: Infra Reviewer}

[cursor]

Risk: medium. Approved — Cursor Bugbot passed with no unresolved findings requiring human review; Cursor Security Agent was not present. Reviewers were already assigned; no additional reviewers requested.

  

_{Sent by Cursor Approval Agent: Infra Reviewer}