qdrant: the ServiceMonitor scrapes http even when TLS is on #4703

The vendored qdrant chart's packages/system/qdrant/charts/qdrant/templates/servicemonitor.yaml (around line 22) hardcodes scheme: http. With TLS on (tls.enabled: true, and every external: true release, since TLS follows external when unset) qdrant serves HTTPS on its metrics port, so the scrape fails silently and the instance has no metrics. Found while writing the qdrant trust-anchor e2e (#4701). Fix shape: set the scheme and TLS config from the same TLS switch the StatefulSet uses (scheme https with the release CA), through a patch under packages/system/qdrant/ since the chart is vendored, plus a helm-unittest case for both settings.