chore: prepare release v3.7.7

[mekilis]

Summary

• Bump the Convoy Helm chart and vendored agent/server subcharts to 3.7.7 with app image v26.3.7.
• Keep agent/server parent image tags tied to the shared global *tag value so global.convoy.tag remains the source of truth.
• Wire JWT secrets into agent/server migrate init containers and the agent workload, using chart-managed JWT Secrets by default or global.convoy.jwt_secret_name when provided.

Test plan

• helm lint .
• helm template convoy-test . --values values.yaml --values ci/integration-kind-values.yaml
• helm template ... --set global.convoy.jwt_secret_name=existing-jwt-secret
• Local kind install with CI values reached Running for agent, server, Postgres, and Redis.

---

Note

Medium Risk
Changes affect JWT secret sourcing for agent and database migrate jobs; misconfiguration could break auth or migrations, though behavior mirrors existing server JWT patterns.

Overview
Releases Convoy Helm 3.7.7 with app image v26.3.7 across the umbrella chart, Chart.lock, README badges, and vendored agent / server subcharts; default image tags follow global.convoy.tag.

The agent subchart now supplies JWT configuration to the migrate init container and main workload: CONVOY_JWT_* from an existing secret (global.convoy.jwt_secret_name), a chart-managed Secret (charts/agent/templates/jwt-secret.yaml + convoy-agent.jwtSecretName), or inline agent.env.auth.jwt defaults. Parent values.yaml adds agent.env.auth.jwt wired to global JWT YAML anchors; docs clarify production use of jwt_secret_name.

Server migrate init containers (Deployment and Rollout) gain the same JWT env pattern via convoy-server.jwtSecretName; server app containers already had JWT handling. global.convoy.jwt_secret_name help text is updated in root values and README.

^{Reviewed by Cursor Bugbot for commit daed61a. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 7a5c404. Configure here.}