issue with pulling Helm charts from private Docker Hub OCI registry

[kurtlieu]

I'm attempting to follow the ArgoCD app of apps pattern.
I have access to an external, private Docker Hub where the customer stores their Helm charts.
I have created a Kubernetes Secret with the credentials the customer has provided, and see that it connects in the ArgoCD portal under Repositories.
I can also manually run helm registry login registry-1.docker.io , authenticate, and pull their helm charts

helm pull oci://registry-1.docker.io/CUSTOMER_ORG_NAME/CUSTOMER-HELM-CHART
apiVersion: v1
kind: Secret
metadata:
  name: customer-helm-registry-creds
  namespace: argocd
  labels:
    argocd.argoproj.io/secret-type: repository
stringData:
  name: customer-helm-registry
  url: registry-1.docker.io
  enableOCI: "true"
  type: helm
  username: "REDACTED"
  password: "REDACTED"
  ForceHttpBasicAuth: "true"

I have my own private GitHub repo where my ArgoCD Application manifests and (parent) Helm charts are stored.
in my Application manifest, I point to the GitHub repo itself

spec:
  project: default
  sources:
  - repoURL: git@github.com:my_org_github/aip.git  # Your IAC repo URL
    path: apps/MY_PARENT_HELM_CHART_WRAPPER_OR_CUSTOMER_HELM_CHARTS
    targetRevision: HEAD
    helm:
      # releaseName: customer_app_name
      passCredentials: true
      valueFiles:
        - dev.values.yaml

In my Chart.yaml, I have dependencies set to point to the customer's Docker Hub

dependencies:
- name: "CUSTOMER-HELM-CHART"
  version: 1.0.0

  # This auths successfully and the syntax to pull is correct, but does NOT work. It should auth to oci://registry-1.docker.io, NOT oci://registry-1.docker.io/CUSTOMER_ORG_NAME
  # repository: "oci://registry-1.docker.io/CUSTOMER_ORG_NAME"

  # This auths correctly, but does NOT pull the chart correctly (because I haven't specified the org)
  repository: "oci://registry-1.docker.io"

As pointed out in the comments, I've observed the above behavior based on the logs from the argocd-repo-server container
Changing the name to CUSTOMER_ORG/customer-helm-chart introduces this error
You may need to run helm dependency build to fetch missing dependencies: found in Chart.yaml, but missing in charts/ directory: CUSTOMER_ORG/customer-helm-chart

I understand that ArgoCD itself supports the ability to authenticate and directly pull from OCI registries.
and that Helm dependencies can also pull from private OCI repositories.
but chaining this together where I introduce a middle/parent Helm chart, causes me this discrepancy.

Does anyone have insight as to whether or not this design is possible?
Whether I have missed any sort of configuration that would enable this, or whether it's a bug or edge case with ArgoCD?
Or am I chasing down a completely lost cause.

I would need to have the project's Helm charts stored within my own GitHub or have hosted in another private Helm Chart repository such as ChartMuseum or ArtifactHub

I saw this issue which seems similar, but I'm unclear as to where I might be going wrong
#12436