Conventions batch 1: icons, template file names, cosmetics

- Add icon: to all 17 Chart.yaml (official project icons); removes the
  last helm lint --strict INFO finding across the repo
- Rename template files to the <app>.<kind>.yaml scheme (apache-tika,
  gotenberg, teamspeak-server PVC, paperless-ngx configmap) - pure
  git mv, no content changes
- template-chart: fix missing space in {{ .Chart.Name}} and rename the
  ConfigMap resource -config-map -> -configmap (chart is never published)
- rallly: fix typos in required messages (rallySecret -> ralllySecret,
  databseSecret -> databaseSecret)
- README: document the deliberate PVC-name exception from the naming
  scheme (renames would provision new empty volumes)
- Patch-bump all 16 published charts

Rendered resources are byte-identical for all published charts (only
helm's '# Source:' comments change for the renamed files); the only
render change is the template-chart ConfigMap name.

Part of #32

apache-tika/templates/apache-tika.deployment.yaml

@@ -0,0 +1,47 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ .Release.Name }}-{{ .Chart.Name }}-deployment
+  labels:
+    app: {{ .Release.Name }}-{{ .Chart.Name }}-deployment
+spec:
+  replicas: {{ include "apache-tika.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.tika.replicas) }}
+  selector:
+    matchLabels:
+      app: {{ .Release.Name }}-{{ .Chart.Name }}-deployment
+  template:
+    metadata:
+      name: {{ .Release.Name }}-{{ .Chart.Name }}-deployment
+      labels:
+        app: {{ .Release.Name }}-{{ .Chart.Name }}-deployment
+    spec:
+      automountServiceAccountToken: false
+      securityContext:
+        {{- toYaml .Values.tika.securityContext.pod | nindent 8 }}
+      containers:
+        - name: {{ .Release.Name }}-{{ .Chart.Name }}-deployment
+          image: "apache/tika:{{ .Chart.AppVersion }}"
+          imagePullPolicy: IfNotPresent
+          securityContext:
+            {{- toYaml .Values.tika.securityContext.container | nindent 12 }}
+          volumeMounts:
+            # Tika writes temporary files during parsing; with a read-only
+            # root filesystem /tmp must be a writable emptyDir.
+            - name: tmp
+              mountPath: /tmp
+          ports:
+            - containerPort: 9998
+              protocol: TCP
+              name: tika-port
+          livenessProbe:
+            {{- toYaml .Values.tika.livenessProbe | nindent 12 }}
+          readinessProbe:
+            {{- toYaml .Values.tika.readinessProbe | nindent 12 }}
+          startupProbe:
+            {{- toYaml .Values.tika.startupProbe | nindent 12 }}
+          resources:
+            {{- include "apache-tika.resources" .Values.tika.resources | nindent 12 }}
+      volumes:
+        - name: tmp
+          emptyDir: {}
+      restartPolicy: Always