ci/woodpecker/push/build-ci-images Pipeline was canceled
Additive; the running controller is untouched: - ci/images/netbird-proxy-services -> ci/images/netbird-service-sync, build step and image name renamed, so the merge builds gitea_admin/netbird-service-sync. - Namespace netbird-service-sync with a baseline policy: probes in; out only to kube-dns, kube-apiserver, OpenBao :8200 and world :443 (NetBird management API). - openbao-ns admits netbird-service-sync on :8200, like wiki-index. - policies/netbird-service-sync.hcl documents the new policy and role (applied by hand, as before). Refs #876 Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>