Helm 4's new WebAssembly plugin system adds sandboxed isolation and cross-architecture portability to Kubernetes tooling.