feat(manager/helmv3): add support for ECR credentials

[ezzatron]

Changes

This PR allows Renovate to use helm registry login to sign in with an AWS ECR token when updating Helm dependencies.

Context

Addresses the discussion in #19241.

Prior to this change, Helm library chart updates from AWS ECR could be detected by Renovate so long as AWS credentials were configured in hostRules, but when attempting to run helm dependency update, the update would always fail, because Helm itself was not signed in to the registry. This PR re-uses some code from the docker manager for acquiring an ECR token, and uses the token to sign in to the registry.

We have Helm library charts in an AWS ECR registry at my workplace, and I have run this code against one of our repos which was previously failing with an error like:

Command failed: helm dependency update charts
Error: could not download oci://123456789.dkr.ecr.us-east-1.amazonaws.com/some-library: unexpected status from HEAD request to https://123456789.dkr.ecr.us-east-1.amazonaws.com/v2/some-library/manifests/1.0.6: 401 Unauthorized

After these changes, the Renovate PR was successfully created.

• fixes ECR OCI Credentials for Docker and Helm repositories #19241

Documentation (please check one with an [x])

• I have updated the documentation, or
• No documentation update is required

How I've tested my work (please select one)

I have verified these changes via:

• Code inspection only, or
• Newly added/modified unit tests, or
• No unit tests but ran on a real repository, or
• Both unit tests + ran on a real repository

[renovate-release]

🎉 This PR is included in version 36.104.0 🎉

The release is available on:

• GitHub release
• 36.104.0

Your semantic-release bot 📦🚀