install_only=false now warns and upgrades across a pinned version change
instead of erroring "refusing to upgrade/downgrade", unblocking the CD
path (helm upgrade --install of a newly published chart). Roll-forward
only — helm fails loudly, no auto-rollback (ADR-012-2).