SIENTIAPDE-2068: feat(cicd): migrate model-manager deploy to Flow B

- Replace legacy reusable-deploy.yml call (stale input shape, pointed at
  sientia-dataops-helm-repo) with reusable-deploy-dataops.yml — mirror to
  Gitea, dual-bump GITHUB_BRANCH (development + chart-ref label branch),
  helmfile deploy. First tarball release for this repo (create_tarball
  default true). workflow_dispatch has no inputs.
- Add require-chart-ref-label.yml.

.github/workflows/deploy.yml

@@ -1,33 +1,28 @@
-name: Deploy Python Application
+name: Deploy DataOps Worker
 
 on:
   pull_request:
-    types:
-      - closed
-    branches:
-      - main
-      - 'release/**'
-      - 'feature/**'
+    types: [closed]
+    branches: [main, 'release/**', 'feature/**']
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  id-token: write
+  pull-requests: read
 
 jobs:
   deploy:
     name: Deploy
-    if: github.event.pull_request.merged == true
-    permissions: write-all
-    uses: Aignosi/github_workflow_templates/.github/workflows/reusable-deploy.yml@main
+    if: github.event_name == 'workflow_dispatch' || github.event.pull_request.merged == true
+    uses: Aignosi/github_workflow_templates/.github/workflows/reusable-deploy-dataops.yml@main
     with:
       branch_name: ${{ github.event.pull_request.head.ref }}
-      project_type: 'python'
-      image_name: 'sientia-dataops-model-manager'
-      helm_chart_path: 'sientia-module'
-      helm_release_name: 'sientia-dataops-model-manager'
-      helm_namespace: 'sientia'
-      update_version_in: '["pyproject", "values"]'
-      app_owner: 'Aignosi'
-      private_repos: 'sientia-dataops-library'
-      helm_repo_name: 'sientia'
-      helm_repo_url: 'https://raw.githubusercontent.com/Aignosi/sientia-dataops-helm-repo/refs/heads/main/'
-      helm_chart_version: '0.6.0'
-      helm_values_file: './values.yaml'
-      use_vpn: true
+      project_name: 'model-manager'
+      chart_name: 'model-manager'
+      env_list_path: '.global.env'
+      create_tarball: ${{ github.event_name == 'pull_request' }}
+      mirror: true
+      bump_chart: true
+      deploy: true
     secrets: inherit

.github/workflows/require-chart-ref-label.yml

@@ -0,0 +1,16 @@
+name: Require chart-ref label
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, labeled, unlabeled]
+    branches:
+      - main
+      - 'release/**'
+      - 'feature/**'
+
+permissions:
+  pull-requests: write
+
+jobs:
+  require-chart-ref-label:
+    uses: Aignosi/github_workflow_templates/.github/workflows/require-chart-ref-label.yml@main