refactor: remove handling of sole repository, always require both repo and tag

.gitea/workflows/ci.yaml

@@ -69,9 +69,6 @@ jobs:
           check "Helmfile image (repository+tag)" "example.com/helmfile/app:v4"
           check "Helmfile images.worker (repository+tag)" "example.com/helmfile/worker:v5"
           check "Helmfile images.helper (repository+tag with digest)" "example.com/myproject/helper:2.0@sha256:cccc"
-          check "Helmfile repository only (no tag)" "example.com/helmfile/repo-only"
-          echo -n "  Helmfile tag only (skipped, no output): "
-          echo "$images" | grep -q ':v99' && { echo "FAIL (orphan tag should be skipped)"; exit 1; } || echo "OK"
           
           # Shared ref (in both files) — must appear exactly once
           check "Shared ref present (distroless/static:nonroot)" "example.com/distroless/static:nonroot"
@@ -80,7 +77,7 @@ jobs:
           [ "$count" -eq 1 ] && echo "OK (count=$count)" || { echo "FAIL (count=$count, expected 1)"; exit 1; }
           total=$(echo "$images" | tr ',' '\n' | grep -c . || true)
           echo -n "  Total unique refs: "
-          [ "$total" -eq 11 ] && echo "OK ($total)" || { echo "FAIL (got $total, expected 11)"; exit 1; }
+          [ "$total" -eq 10 ] && echo "OK ($total)" || { echo "FAIL (got $total, expected 10)"; exit 1; }
           
           echo ""
           echo "All checks passed."