test(charts): add helm-unittest suite for jobs-manager-service template

[saadqbal]

What

Adds a helm-unittest suite for the previously-untested templates/jobs-manager-service.yaml.

Tracking epic: #193

Why

jobs-manager-service.yaml exposes jobs-manager's internal HTTP ingestion endpoint at a stable in-cluster name (jobs-manager) so the ingestor subchart's post-install hook can POST without discovering Pod IPs. It had no test suite, so its ClusterIP-only boundary and name/port contract were unverified.

Coverage delta

• +1 template suite (jobs-manager-service); 8 tests / ~14 assertions
• Chart suites 15 → 16 (167 tests total, all green via helm unittest ./client)

Assertions

• Renders a single Service
• Named jobs-manager (stable in-cluster name contract)
• type: ClusterIP and notNodePort/LoadBalancer (no external exposure)
• Selects app=manager
• Exposes HTTP port 8080/TCP only (single port)
• Carries app=manager + standard chart labels, in the release namespace

tests-only; security invariants unchanged.

---

Note

Low Risk
Test-only addition with no changes to Helm templates or deployed manifests.

Overview
Adds helm-unittest coverage for templates/jobs-manager-service.yaml, which previously had no suite.

The new client/tests/jobs_manager_service_test.yaml suite (8 tests) locks in the rendered Service contract: fixed name jobs-manager, ClusterIP only (explicitly not NodePort/LoadBalancer), selector app=manager, a single TCP 8080 HTTP port, standard chart labels plus app=manager, and placement in the release namespace. Tests-only; no chart template or runtime behavior changes.

^{Reviewed by Cursor Bugbot for commit 7af855a. Bugbot is set up for automated code reviews on this repo. Configure here.}

[LukasWodka]

👋 Heads-up — Code review queue is at 23 / 8

Above the WIP limit. The team convention is to review existing PRs before opening new work.

Open PRs currently in Code review (oldest first):

• averaging-service#102 — chore(kanban): declare staging as prod-truth branch via .kanban.yml · author: @LukasWodka · no reviewer assigned
• averaging-service#103 — fix(averaging): correctness foundations — DP, shape guard, sklearn weighting, bounded ensembles (chore: add default CODEOWNERS for auto-reviewer assignment #73) · author: @LukasWodka · reviewer: @shujaatTracebloc
• averaging-service#98 — ci: add fr-gate caller workflow · author: @LukasWodka · no reviewer assigned
• backend#732 — feat(experiments): add per-experiment aggregation_strategy field (fix(installer): the stdin write must not throw when the child closed the pipe #730) · author: @LukasWodka · reviewer: @saqlainsyed007, @shujaatTracebloc
• backend#735 — fix(flops): atomic flops_used + fire stop once on threshold crossing (feat(chart): stop injecting the fixed training-job envelope; let jobs-manager size it (backend#664) #733) · author: @saadqbal · no reviewer assigned
• cli#61 — fix(install.sh): persist PATH to the shell rc (parity with install.ps1) · author: @LukasWodka · reviewer: @saadqbal
• client#207 — test(charts): add helm-unittest suite for ingestion-authz-configmap · author: @saadqbal · no reviewer assigned
• data-ingestors#146 — test(schema): lock category enum to the engine's TaskCategory (anti-drift) · author: @LukasWodka · reviewer: @saadqbal
• data-ingestors#151 — harden(validator): reject non-finite (inf) numerics + realistic messy-data scenario tests · author: @LukasWodka · no reviewer assigned
• data-ingestors#155 — harden(ingestion): align tabular NA parsing with validator + reject over-long column names · author: @LukasWodka · no reviewer assigned

Pull from review before opening new work. (This is a nudge from the kanban WIP check, not a block.)