The rebuild pipeline commits a new talosconfig/kubeconfig each run. Without a git pull beforehand, import-cluster-access imports stale configs and kubectl fails with x509 CA mismatch against the newly rebuilt cluster. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>