deploy/meru.yaml (nuwa-app 0.5.0, build: true) and deploy/values.yaml: certificate for Temporal's front door, KEDA autoscaling on /backlog, the Authentik + Gitea logins from OpenBao through ESO. Until the first main build the digest is a placeholder - Argo can render the app, so the runner comes up and makes that build; the pod is refused until a signed image exists. CI copied from Thoth's (no database), scripts/check.sh for the checks. Co-Authored-By: Claude Opus 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_01MdS1HcMerN6toVuLY5K4MR