expose enforceAuthOnInference in bifrost.config

[nirzOps]

Helm: expose enforceAuthOnInference in bifrost.config

PR: #1946 | Changes

What

This PR adds support for bifrost.client.enforceAuthOnInference in the Helm chart so the generated Bifrost config can set enforce_auth_on_inference (client config). When set, the gateway can enforce authentication on inference endpoints as configured.

Why

We need to toggle auth enforcement on inference via Helm values instead of editing raw config, so deployments stay consistent and auditable.

How

In helm-charts/bifrost/templates/_helpers.tpl, inside the bifrost.config client block, we map:

• Values: bifrost.client.enforceAuthOnInference
• Config: enforce_auth_on_inference

Only included when the key is present (same pattern as enableLogging, enforceGovernanceHeader, etc.).

Usage

bifrost:
  client:
    enforceAuthOnInference: true

[nirzOps]

@akshaydeo We have to create a new app version with this fix as we can not use bifrost at the moment because virtual keys are not enforced in order to use the gateway.