Merge master into worktree-restore-test-real

Conflict in kubernetes/apps/woodpecker/objectstore.yaml: master (#1295)
pointed wp-pg-store-source at wp-pg-woodpecker; this branch moved both
woodpecker ObjectStores to kubernetes/cnpg-object-stores/wp-pg.yaml, whose
source path comes from cnpg-paths and covers wp-pg-woodpecker through
cnpg.renner.uno/source-prefixes. Resolved by keeping the deletion.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

kubernetes/apps/gitea-mcp/deployment.yaml

@@ -23,7 +23,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: gitea-mcp
-          image: docker.gitea.com/gitea-mcp-server:1.8.1 # {"$imagepolicy": "flux-system:gitea-mcp"}
+          image: docker.gitea.com/gitea-mcp-server:1.9.0 # {"$imagepolicy": "flux-system:gitea-mcp"}
           # Image has no ENTRYPOINT (binary is in CMD), so args alone would replace it.
           command:
             - /app/gitea-mcp

kubernetes/apps/home-assistant/deployment.yaml

@@ -95,7 +95,7 @@ spec:
               memory: 32Mi
       containers:
         - name: home-assistant
-          image: ghcr.io/home-assistant/home-assistant:2026.10.1 # {"$imagepolicy": "flux-system:home-assistant"}
+          image: ghcr.io/home-assistant/home-assistant:2026.10.2 # {"$imagepolicy": "flux-system:home-assistant"}
           env:
             - name: TZ
               value: Europe/Berlin