feat(KFLUXVNGD-1174): enable Cargo config.json auth-required rewrite

Configure nginx.subFilters on staging artifact-registry proxies to rewrite
"auth-required":true to false on config.json responses. Updates the live
squid monolith path (stone-stg-rh01) and ring-1 independent component.

Bump staging squid caching-helm to 0.1.1836+6dabb5a. Chart version must be
updated again after konflux-ci/caching #1056 publishes (see TODO on version).

Depends on caching #1056 merge before subFilters render in nginx.

Jira-Url: https://redhat.atlassian.net/browse/KFLUXVNGD-1174
Co-authored-by: Cursor <cursoragent@cursor.com>

Author: 2 people

components/squid/staging/caching-helm-generator.yaml

@@ -4,7 +4,8 @@ metadata:
   name: caching-helm
 name: caching-helm
 repo: oci://quay.io/konflux-ci/caching
-version: 0.1.1775+d865e45
+# TODO(KFLUXVNGD-1174): bump after caching #1056 chart is on quay
+version: 0.1.1836+6dabb5a
 valuesInline:
   squid:
     enabled: true
@@ -28,6 +29,11 @@ valuesInline:
     auth:
       enabled: true
       secretName: artifact-registry-credentials
+    subFilters:
+      - location: '^/repository/[^/]+/config\.json$'
+        filters:
+          - string: '"auth-required":true'
+            replacement: '"auth-required":false'
     cache:
       allowList:
         # Cache all traffic to nexus repositories