Enable auth-service/api-gateway on production, build their images in CI

infra/helm/medical-chatbot/values-production.yaml

@@ -53,6 +53,19 @@ aiService:
     answerModelId: qwen.qwen3-next-80b-a3b
     rerankEnabled: true
 
+# First real-auth rollout to production (2026-08-18). The seed `admin`/`demo`
+# passwords are NOT set here — they're secret, so they go inline on the live
+# Application the same way secret.grafanaAdminPassword already does (see the
+# comment in infra/argocd/applications/medical-chatbot-app.yaml). The chart
+# fails closed via `required` if secret.jwtSecret / adminSeedPassword /
+# demoSeedPassword are missing, so an inline-values update that forgets one
+# of them breaks sync loudly instead of seeding "1".
+authService:
+  enabled: true
+
+apiGateway:
+  enabled: true
+
 observability:
   grafana:
     # Dashboards stay open so a demo needs no credentials, but read-only: this