docs: add Kubernetes vs. VM install feature comparison table to enterprise-vs-oss

enterprise/enterprise-vs-oss.mdx

@@ -13,9 +13,9 @@
 | Feature | Agent Canvas | OpenHands Enterprise |
 |---------|-------------------|----------------------|
 | **Full breadth of agent functionality (sub-agents, MCP, skills, model agnosticism)** | ✅ | ✅ |
 | **Where does the agent run?** | Locally or on a custom backend | Scalable, Kubernetes runtimes |
 | **Automations** <br /> *Create scheduled and event-based workflows* | ✅  | ✅ |
 | **'@OpenHands' in Slack and Jira** <br /> *Important for real-time resolution of bugs and feedback* | Requires custom [Automation](/openhands/usage/automations/overview) | Native integration |
 | **'@OpenHands' in GitHub, GitLab, Bitbucket** <br /> *Important for real-time resolution of PR comments and failing tests* | Requires custom [Automation](/openhands/usage/automations/overview) | Native integration |
 | **Share conversations** <br /> *Unlock collaboration use cases* | ❌ | ✅ |
 | **Multi-user Organizations and RBAC** <br /> *Roll out to several users and teams* | ❌ | ✅ |
@@ -41,11 +41,35 @@
 OpenHands Enterprise is the right choice when you need:
 
 - **Multi-use RBAC** — Manage multiple users from a single platform
 - **Platform integrations** — Invoke OpenHands directly from Slack, Jira, GitHub, GitLab, or Bitbucket
 - **Scalability** — Run unlimited parallel agent conversations without local resource constraints
 - **Enterprise security** — SAML authentication, RBAC, and centralized audit logs
 - **Usage Monitoring** — Track and enforce budgets; monitor usage across all users
 
+#### Kubernetes vs. VM Install — Feature Comparison
+
+OpenHands Enterprise is available in two self-hosted deployment modes:
+- **Kubernetes (Helm) install** — deploys into your existing Kubernetes cluster using Helm charts
+- **VM (Embedded Cluster) install** — runs an embedded Kubernetes cluster on a dedicated VM via the Replicated installer
+
+The table below shows feature availability across both modes:
+
+| Feature | Kubernetes Install | VM Install |
+|---------|:-----------------:|:----------:|
+| **Access to LLM Gateway + Budgeting** <br /> *Access to LiteLLM for model routing and per-user/org cost controls* | ✅ | ✅ |
+| **Agent Observability** <br /> *Laminar integration for LLM conversation tracing and analytics* | ✅ Opt-in | ✅ Opt-in |
+| **Automations** <br /> *Scheduled and event-driven agent workflows* | ✅ Opt-in | ✅ Opt-in |
+| **Plugin Marketplace** <br /> *Private plugin directory for team-published plugins* | ✅ | ⚠️ Experimental |
+| **Organizations + RBAC** <br /> *Multi-user organizations with role-based access control* | ✅ via Keycloak | ✅ via Keycloak |
+
+<Note>
+  **Automations** and **Agent Observability (Laminar)** are disabled by default in both deployment modes and must be
+  explicitly enabled — via Helm values in the Kubernetes install, or via the Replicated Admin Console in the VM install.
+
+  **Plugin Marketplace** is available in the VM install but is currently listed as an **Experimental** feature and
+  disabled by default.
+</Note>
+
 ## Getting Started
 
 <CardGroup cols={2}>