fix: resolve deployment API errors and enable E2E deployment flow

Backend fixes:
- instance_dto: add Version field with Normalize() to support both 'version'
  and 'tag' field names from frontend
- instance_handler: add version empty validation before creating instance
- authz.go: fix unused variable compilation error
- registry_repository: fix GetByID/GetByName to use correct DB schema
  (add workspace_id, owner_id, is_shared fields); decrypt password
  gracefully when encryption key mismatches instead of returning error

Frontend:
- charts/page: add Template and Storage dropdown selectors to Deploy Modal

Testing:
- add e2e_test.py: 5-step Playwright E2E test (admin login → create
  workspace → create user → user login → deploy chart)
- add tasks/lesson.md: document 4 bug root causes and fixes
- add tasks/todo.md: track implementation progress
- add PLAN_E2E_DEPLOYMENT.md: comprehensive implementation plan

Verification: confirmed deployment creates instance with status=deployed,
chart downloads from Harbor OCI to /tmp/charts/, Helm release deploys to K8s

backend/internal/adapter/input/http/dto/instance_dto.go

@@ -7,7 +7,8 @@ type CreateInstanceRequest struct {
 	RegistryID    string                 `json:"registryId" binding:"required"`
 	RegistryIDAlt string                 `json:"registry_id"`
 	Repository    string                 `json:"repository" binding:"required"`
-	Tag           string                 `json:"tag" binding:"required"`
+	Tag           string                 `json:"tag"`
+	Version       string                 `json:"version"`
 	Description   string                 `json:"description"`
 	Values        map[string]interface{} `json:"values"`
 	ValuesYAML    string                 `json:"valuesYaml"`
@@ -26,6 +27,10 @@ func (r *CreateInstanceRequest) Normalize() {
 	if r.RegistryID == "" {
 		r.RegistryID = r.RegistryIDAlt
 	}
+	// Support both "tag" and "version" field names from frontend
+	if r.Tag == "" {
+		r.Tag = r.Version
+	}
 }
 
 // RollbackInstanceRequest 回滚实例请求