add provider-helm, kubernetes, azure, gcp models and provider update …

[humoflife]

• Add four new CRD model packages: provider-helm v1.2.0, provider-kubernetes v1.2.1, provider-upjet-azure v2.5.0, provider-upjet-gcp v2.5.0
• Bump provider-upjet-aws to v2.5.0 and annotate all providers with crossplane-provider metadata (repository, version, crdDir, fetchStrategy)
• Add scripts/update-provider.ts to bump a single provider version, rewrite its CRD input list (URL fetch or glob), and emit a changeset
• Add scripts/check-provider-updates.ts to query GitHub releases for all providers and auto-update any that are behind; exits 1 when updates are found so CI can open a PR
• Extend scripts/new-crd-package.ts with --repository, --provider-version, and --fetch-strategy flags to wire new packages into automated update checks
• Add glob pattern expansion to crd-generate CLI so clone-based packages can reference CRDs via *.yaml patterns instead of enumerating every file
• Update CONTRIBUTING.md and README.md to document the new providers and update-provider / check-provider-updates workflows

Description of your changes

Fixes #

scripts/update-provider.ts: added .version(false) to the yargs chain before declaring the --version option. Without this, yargs treats --version as its built-in flag (returning a boolean true), which caused tag.startsWith is not a function at runtime.

I have:

• Read and followed Upbound's contribution process.
• Run make reviewable to ensure this PR is ready for review.
• Added backport release-x.y labels to auto-backport this PR, as appropriate.

How has this code been tested

All six tests passed on macOS (Node 24, pnpm 10.25.0).

#	Test	Result
1	Lint — ESLint + syncpack	✅ Pass — no issues
2	Build URL-based providers (provider-helm, provider-kubernetes)	✅ Pass — 7 and 9 CRDs fetched from raw.githubusercontent.com, all TypeScript generated and compiled
3	Glob expansion / provider-upjet-aws prebuild	✅ Pass — repo cloned at v2.5.0, 2,016 CRDs resolved via *.yaml glob
4	update-provider no-op	✅ Pass — correctly detects provider-helm@v1.2.0 and provider-kubernetes@v1.2.1 are current
5	check-provider-updates vs GitHub API	✅ Pass — all 6 providers confirmed up to date; script exits 0
6	new-crd-package with new flags	✅ Pass — crossplane-provider block written correctly into generated package.json

[stevendborrelli]

Thank you @humoflife, this is a great contribution!