how do you guys maintain docker image versions in deployments and helm charts? let’s say I use Operator to deploy a stack, I want something to open PRs on git to keep my image versions current like an SCA like renovate or snyk but for my pulumi code