fix: use plain string for cache_from/cache_to and fix caretta helm_release

- cache_from/cache_to must be plain strings, not YAML lists — the
  plugin-docker-buildx treats them as single string values and the
  Woodpecker settings layer was splitting comma-separated list items
  into separate --cache-from flags (type=registry and ref=... separately)
- caretta.tf: replace deprecated set{} blocks with values=[yamlencode()]
  to fix Terraform plan error with newer Helm provider

.woodpecker/build-cli.yml

@@ -26,10 +26,8 @@ steps:
       dockerfile: cli/Dockerfile
       context: cli
       auto_tag: true
-      cache_from:
+      cache_from: "type=registry,ref=registry.viktorbarzin.lan:5050/infra:buildcache"
-        - "type=registry,ref=registry.viktorbarzin.lan:5050/infra:buildcache"
+      cache_to: "type=registry,ref=registry.viktorbarzin.lan:5050/infra:buildcache,mode=max"
-      cache_to:
-        - "type=registry,ref=registry.viktorbarzin.lan:5050/infra:buildcache,mode=max"
       buildkit_config: |
         [registry."registry.viktorbarzin.lan:5050"]
           http = true

.woodpecker/f1-stream.yml

@@ -29,10 +29,8 @@ steps:
       platforms: linux/amd64
       provenance: false
       tags: latest
-      cache_from:
+      cache_from: "type=registry,ref=registry.viktorbarzin.lan:5050/f1-stream:buildcache"
-        - "type=registry,ref=registry.viktorbarzin.lan:5050/f1-stream:buildcache"
+      cache_to: "type=registry,ref=registry.viktorbarzin.lan:5050/f1-stream:buildcache,mode=max"
-      cache_to:
-        - "type=registry,ref=registry.viktorbarzin.lan:5050/f1-stream:buildcache,mode=max"
       buildkit_config: |
         [registry."registry.viktorbarzin.lan:5050"]
           http = true

stacks/platform/modules/monitoring/caretta.tf

@@ -7,15 +7,14 @@ resource "helm_release" "caretta" {
   chart      = "caretta"
   version    = "0.0.16"
 
-  set {
+  values = [yamlencode({
-    name  = "grafana.enabled"
+    grafana = {
-    value = "false"
+      enabled = false
-  }
+    }
-
+    victoria-metrics-single = {
-  set {
+      enabled = false
-    name  = "victoria-metrics-single.enabled"
+    }
-    value = "false"
+  })]
-  }
 }
 
 resource "kubernetes_service" "caretta_metrics" {