Merge branch 'main' into fix-merge-to-main

CronJob pods were stuck in ImagePullBackOff because they referenced
the local-only image 'myorg-assistant:latest' which is not present
on the node. Switch all 5 cronjobs to the Gitea registry image
git.rogi.casa/roger/myorg-assistant/myorg-assistant:fcf79bf
(matching the Deployment), set imagePullPolicy: Always, and add
imagePullSecrets: gitea-registry so they can authenticate to the
private registry.

argocd-bootstrap.yaml

@@ -22,3 +22,9 @@ spec:
       selfHeal: true
     syncOptions:
       - CreateNamespace=false
+  ignoreDifferences:
+    - group: argoproj.io
+      kind: Application
+      jsonPointers:
+        - /status
+        - /operation

argocd/argocd-rbac-cm.yaml

@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: argocd-rbac-cm
-  namespace: argocd
-  labels:
-    app.kubernetes.io/name: argocd-rbac-cm
-    app.kubernetes.io/part-of: argocd
-data:
-  policy.default: ""
-  policy.csv: |
-    p, role:platform-engineer, applications, get, */*, allow
-    p, role:platform-engineer, applications, sync, */*, allow
-    p, role:platform-engineer, projects, get, *, allow
-    g, platform-engineer, role:platform-engineer

myorg-assistant/cronjobs/deadline-checker.yaml

@@ -27,7 +27,7 @@ spec:
           containers:
           - name: deadline-checker
             image: git.rogi.casa/roger/myorg-assistant/myorg-assistant:fcf79bf
-            imagePullPolicy: IfNotPresent
+            imagePullPolicy: Always
             command:
             - python
             - run_job.py

myorg-assistant/cronjobs/evening-summary.yaml

@@ -27,7 +27,7 @@ spec:
           containers:
           - name: evening-summary
             image: git.rogi.casa/roger/myorg-assistant/myorg-assistant:fcf79bf
-            imagePullPolicy: IfNotPresent
+            imagePullPolicy: Always
             command:
             - python
             - run_job.py

myorg-assistant/cronjobs/git-sync.yaml

@@ -27,7 +27,7 @@ spec:
           containers:
           - name: git-sync
             image: git.rogi.casa/roger/myorg-assistant/myorg-assistant:fcf79bf
-            imagePullPolicy: IfNotPresent
+            imagePullPolicy: Always
             command:
             - python
             - run_job.py

myorg-assistant/cronjobs/morning-briefing.yaml

@@ -27,7 +27,7 @@ spec:
           containers:
           - name: morning-briefing
             image: git.rogi.casa/roger/myorg-assistant/myorg-assistant:fcf79bf
-            imagePullPolicy: IfNotPresent
+            imagePullPolicy: Always
             command:
             - python
             - run_job.py

myorg-assistant/cronjobs/waiting-followup.yaml

@@ -27,7 +27,7 @@ spec:
           containers:
           - name: waiting-followup
             image: git.rogi.casa/roger/myorg-assistant/myorg-assistant:fcf79bf
-            imagePullPolicy: IfNotPresent
+            imagePullPolicy: Always
             command:
             - python
             - run_job.py

platform-engineer/configmap.yaml

@@ -9,18 +9,18 @@ data:
   config.yaml: |
     model:
       provider: openai-api
-      default: z-ai/glm-5.2
+      default: qwen3.6
       base_url: "http://litellm-service.litellm:80/v1"
       api_mode: chat_completions
 
     auxiliary:
       compression:
         provider: openai-api
-        model: z-ai/glm-5.2
+        model: qwen3.6
         base_url: "http://litellm-service.litellm:80/v1"
       title_generation:
         provider: openai-api
-        model: z-ai/glm-5.2
+        model: qwen3.6
         base_url: "http://litellm-service.litellm:80/v1"
 
     terminal: