fix(k8s): declare every theme type in big-demo so the account console loads (refs #177)

KC_SPI_THEME_DEFAULT applies to all theme types and Keycloak does not fall back
for one the theme lacks: the account console returned 500 (NPE on a null
theme). The theme is now one ConfigMap mounted as a directory with login,
account, admin and email types; the podspec gains `items` for that.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

infra/helm/big-reference/templates/deployments.yaml

@@ -30,8 +30,8 @@ spec:
       annotations:
         checksum/portal-config: {{ include "big.keycloakUrl" $ | sha256sum }}
       {{- end }}
-      {{- /* subPath mounts never refresh, so Keycloak restarts when the toggle flips. */}}
-      {{- if eq .configMap "kc-theme-js" }}
+      {{- /* Keycloak reads the theme at startup, so it restarts when the toggle flips. */}}
+      {{- if eq .configMap "kc-theme" }}
       annotations:
         checksum/otp-autofill: {{ $.Values.demo.otpAutofill | toString | sha256sum }}
       {{- end }}