use inv-companion instead of inv-sig-helper

cluster/apps/invidious/invidious.yml

@@ -65,15 +65,16 @@ spec:
         volumeMounts:
         - name: postgres-data
           mountPath: /var/lib/postgresql/data
-      - name: inv-sig-helper
-        image: quay.io/invidious/inv-sig-helper@sha256:39fee87693ef3d71c212d9511f2adb3230783753342321489deab17caa87c42f
+      - name: inv-companion
+        image: quay.io/invidious/invidious-companion:latest
         restartPolicy: Always
-        args: ["--tcp", "0.0.0.0:12999"]
         env:
-        - name: RUST_LOG
-          value: "info"
+        - name: SERVER_SECRET_KEY
+          valueFrom:
+            secretKeyRef:
+              name: invidious-secrets
+              key: INVIDIOUS_COMPANION_KEY
         securityContext:
-          readOnlyRootFilesystem: true
           capabilities:
             drop:
             - ALL