Update cyberchef application version to 11.4.0

Major jump 10.22.1 -> 11.4.0: the upstream image switched to
nginxinc/nginx-unprivileged (serving port 80 -> 8080, pid/temp dirs
under /tmp). Adjust container port, writable-volume mounts and the
pod security context (sysctl net.ipv4.ip_unprivileged_port_start no
longer needed). Chart major bump 4.1.0 -> 5.0.0 accordingly.

cyberchef/values.yaml

@@ -8,18 +8,14 @@ cyberchef:
   # Replica count for this workload; 0 is allowed and scales it down.
   # The chart-global scaleDown flag takes precedence.
   replicas: 1
-  # The upstream image is stock nginx (root, listening on port 80). To still
-  # run fully non-root, the pod runs as the image's nginx user (uid 101) and
-  # the safe sysctl net.ipv4.ip_unprivileged_port_start=80 lets the unprivileged
-  # nginx bind port 80 without NET_BIND_SERVICE.
+  # Since 11.0.0 the upstream image is nginxinc/nginx-unprivileged: nginx runs
+  # as its nginx user (uid 101) and listens on the unprivileged port 8080, so
+  # no sysctl tweaks are needed to run fully non-root.
   securityContext:
     pod:
       runAsNonRoot: true
       runAsUser: 101
       runAsGroup: 101
-      sysctls:
-        - name: net.ipv4.ip_unprivileged_port_start
-          value: "80"
     container:
       allowPrivilegeEscalation: false
       readOnlyRootFilesystem: true