fix(drupal): gate PreSync cleanup job behind cleanup.enabled flag

The cleanup job uses volumes (PVCs) that don't exist during ArgoCD PreSync
phase on first deploy. Add cleanup.enabled (default true for backward compat)
and set false in platform base-values for ArgoCD clusters.

Also use default SA for cleanup job since custom SA isn't available in PreSync.

Author: operinko

drupal/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
 name: drupal
-version: 1.34.0
+version: 1.34.3
 dependencies:
 - name: mariadb
   version: 7.5.x

drupal/templates/pre-release-cleanup.yaml

@@ -1,3 +1,4 @@
+{{- if .Values.cleanup.enabled }}
 apiVersion: batch/v1
 kind: Job
 metadata:
@@ -28,6 +29,7 @@ spec:
             {{- include "drupal.cleanup-job" . | nindent 12 }}
         volumeMounts:
           {{- include "drupal.volumeMounts" . | nindent 12 }}
-      serviceAccountName: {{ include "drupal.serviceAccountName" . }}
+      serviceAccountName: default
       volumes:
         {{- include "drupal.volumes" . | nindent 8 }}
+{{- end }}

drupal/values.schema.json

@@ -6,6 +6,12 @@
     "projectName": { "type": "string" },
     "environmentName": { "type": "string" },
     "branchName": { "type": "string" },
+    "cleanup": {
+      "type": "object",
+      "properties": {
+        "enabled": { "type": "boolean" }
+      }
+    },
     "imagePullSecrets": { "type": "array" },
     "imagePullSecret": { "type": "string" },
     "serviceAccount": {

drupal/values.yaml

@@ -1051,3 +1051,8 @@ logging:
 # - projectName (scrambles project name subdomain, e.g., release.yyy.<clusterDomain>)
 # - both (obfuscates both, e.g., zzz.<clusterDomain>)
 maskSubdomains: none
+
+# Pre-release cleanup job (runs before sync to clear caches).
+# Disable for ArgoCD deployments where PVCs may not exist during PreSync.
+cleanup:
+  enabled: true