feat: add snapshot-controller

[fitbeard]

Solves: #117

Some answers to obvious questions:

• Helm Chart for External Snapshotter kubernetes-csi/external-snapshotter#812
• https://github.com/piraeusdatastore/helm-charts/tree/main/charts/snapshot-controller
• https://github.com/kubernetes-csi/external-snapshotter/releases/tag/v7.0.2 (for very old k8s versions)

[okozachenko1203]

@fitbeard we migrated manifests to charts and use helm template to render manifests in the code. here is the ref for csi 48d6575

The optimal way to fix the issue is to add an explicit permissions block to the workflow, at the top level (so it applies to all jobs by default), restricting the GITHUB_TOKEN to the least privilege. Since both jobs use the actions/checkout and peter-evans/create-pull-request actions, and the PR creation is done via a custom token (not GITHUB_TOKEN), only read access to git contents is required. Therefore, set permissions: contents: read at the root workflow level (just after the workflow name:), unless there are steps that require more permissions using the GITHUB_TOKEN (none seem present).

Changes needed:

• In .github/workflows/bump.yml, insert a permissions: block after the name: bump line, with at least contents: read.
• No additional packages or methods are required for this change.

---

To fix the issue, add a permissions key to the workflow file. This block can be added either at the root level (applying to all jobs) or at the individual job level. Since both jobs in this workflow perform actions requiring repository access (checkout, create-pull-request, etc.), but only limited permissions are necessary, the block should grant only what is strictly required: contents: write (for pushing branches, committing to repository), and pull-requests: write (to create and update PRs). Some actions may work with less, but the two used here often require these permissions. Insert the following block after the workflow name on line 2:

permissions:
  contents: write
  pull-requests: write

No method imports or external definitions are required.