fix(helm): bump clickhouse subchart 9.3.7 -> 9.4.4 (clickhouse 25.7.5)

Pulls in upstream memory-tracker fixes shipped in clickhouse 25.7.x.
The previous pin (25.6.1) hits a memory-tracker accounting bug under
sustained ingest where the global counter overflows to ~7 EiB, after
which every query is rejected by OvercommitTracker until the pod is
restarted - reported in #3520 with full repro and pod logs.

9.4.4 is the latest packaged release at oci://registry-1.docker.io/
bitnamicharts/clickhouse; that registry has been frozen since
2025-08-28 but the chart source (Apache 2) is still maintained at
bitnami/charts. The image already resolves via bitnamilegacy/clickhouse
(per existing values.yaml override) since bitnami/clickhouse is now
paid-only.

refs #3520

Author: nicktrn

hosting/k8s/helm/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 21.2.6
 - name: clickhouse
   repository: oci://registry-1.docker.io/bitnamicharts
-  version: 9.3.7
+  version: 9.4.4
 - name: minio
   repository: oci://registry-1.docker.io/bitnamicharts
   version: 17.0.9
-digest: sha256:b6cef61abc0b8bcdf4e6d7d86bd8dd7999dd07543f5532f3d94797ffdf0ad30b
-generated: "2025-06-27T19:27:24.075488134+01:00"
+digest: sha256:e1b572ab8eca0cc376311398c27b1734d8a598095fccc81dd9c32b2c8b9c1149
+generated: "2026-05-05T10:31:58.493590751+01:00"

hosting/k8s/helm/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     repository: "oci://registry-1.docker.io/bitnamicharts"
     condition: redis.deploy
   - name: clickhouse
-    version: "9.3.7"
+    version: "9.4.4"
     repository: "oci://registry-1.docker.io/bitnamicharts"
     condition: clickhouse.deploy
   - name: minio

hosting/k8s/helm/values.yaml

@@ -542,7 +542,7 @@ clickhouse:
   image:
     # Use bitnami legacy repo
     repository: bitnamilegacy/clickhouse
-    # image: docker.io/bitnamilegacy/clickhouse:25.6.1-debian-12-r0
+    # image: docker.io/bitnamilegacy/clickhouse:25.7.5-debian-12-r0
 
   # TLS/Secure connection configuration
   secure: false # Set to true to use HTTPS and secure connections