fix: resolve deployment API errors and enable E2E deployment flow

Backend fixes:
- instance_dto: add Version field with Normalize() to support both 'version'
  and 'tag' field names from frontend
- instance_handler: add version empty validation before creating instance
- authz.go: fix unused variable compilation error
- registry_repository: fix GetByID/GetByName to use correct DB schema
  (add workspace_id, owner_id, is_shared fields); decrypt password
  gracefully when encryption key mismatches instead of returning error

Frontend:
- charts/page: add Template and Storage dropdown selectors to Deploy Modal

Testing:
- add e2e_test.py: 5-step Playwright E2E test (admin login → create
  workspace → create user → user login → deploy chart)
- add tasks/lesson.md: document 4 bug root causes and fixes
- add tasks/todo.md: track implementation progress
- add PLAN_E2E_DEPLOYMENT.md: comprehensive implementation plan

Verification: confirmed deployment creates instance with status=deployed,
chart downloads from Harbor OCI to /tmp/charts/, Helm release deploys to K8s

backend/internal/adapter/input/http/dto/instance_dto.go

@@ -7,7 +7,8 @@ type CreateInstanceRequest struct {
 	RegistryID    string                 `json:"registryId" binding:"required"`
 	RegistryIDAlt string                 `json:"registry_id"`
 	Repository    string                 `json:"repository" binding:"required"`
-	Tag           string                 `json:"tag" binding:"required"`
+	Tag           string                 `json:"tag"`
+	Version       string                 `json:"version"`
 	Description   string                 `json:"description"`
 	Values        map[string]interface{} `json:"values"`
 	ValuesYAML    string                 `json:"valuesYaml"`
@@ -26,6 +27,10 @@ func (r *CreateInstanceRequest) Normalize() {
 	if r.RegistryID == "" {
 		r.RegistryID = r.RegistryIDAlt
 	}
+	// Support both "tag" and "version" field names from frontend
+	if r.Tag == "" {
+		r.Tag = r.Version
+	}
 }
 
 // RollbackInstanceRequest 回滚实例请求

backend/internal/adapter/input/http/middleware/authz.go

@@ -47,6 +47,7 @@ func WorkspaceMiddleware(userRepo repository.UserRepository) func(http.Handler)
 				return
 			}
 			token := parts[1]
+			_ = token
 
 			// 这里需要从 AuthService 获取验证方法
 			// 简化处理：假设 token 包含 user_id 和 username

backend/internal/adapter/input/http/rest/instance_handler.go

@@ -45,6 +45,10 @@ func (h *InstanceHandler) CreateInstance(w http.ResponseWriter, r *http.Request)
 		return
 	}
 	req.Normalize()
+	if req.Tag == "" {
+		respondError(w, http.StatusBadRequest, "Invalid request", "version/tag is required")
+		return
+	}
 
 	// Extract chart name from repository (e.g., "charts/nginx" -> "nginx")
 	chart := req.Repository