mathias
4b557a4325
Fixes silent stale-deploy gap: CI built+pushed images but nothing bumped k3s/apps/tapir/deployment.yaml, so merged features sat CI-green with zero production effect (infra#111, infra#168). Flux native image-automation can't scan localhost:5000 from inside k3s pods, so this patches the infra repo directly via the existing INFRA_DEPLOY_KEY org secret (same key cobalt-dingo and brain-gardener already use) on every push to main. Refs infra#111.