feat(ui): hide Helm release secrets by default, with toggle

[ErfanY]

Summary

Helm 3 stores release state as Secrets (type: helm.sh/release.v1, names sh.helm.release.v1.<release>.v<n>). They dominate the Secrets list and are rarely what an operator is looking for. This hides them by default and adds a toggle.

• Hidden by default at the projection layer (Secrets view only — no effect on other kinds).
• Toggle per-context-tab with H (Action::ToggleHelmSecrets, remappable via keymap.toml) or :helm. :helm show / :helm hide set the state explicitly.
• The Secrets table title advertises the current state and the toggle key (helm hidden (H show) / helm shown (H hide)), so the filtered rows are never surprising.

── default (hidden) ──
[KIND] Secrets (2) · helm hidden (H show)
 app-config   Opaque              2
 tls-cert     kubernetes.io/tls   2
── after H (shown) ──
[KIND] Secrets (3) · helm shown (H hide)
 app-config                    Opaque               2
 sh.helm.release.v1.myapp.v3   helm.sh/release.v1   2
 tls-cert                      kubernetes.io/tls    2

Design

Detection lives in ResourceEntity::is_helm_release() (matches the helm type column or the sh.helm.release.v1. name prefix), so the projector filter stays a one-liner. The flag is a per-tab show_helm_secrets: bool threaded through ViewRequest.

Testing

• make validate green locally (99 tests + release build)
• new tests: model detection (type/name/negative/non-secret), projector hide-by-default + show-on-request, render+toggle integration (incl. title hint)

🤖 Generated with Claude Code