PR #26 added the git-clone initContainer but still trusted the GIT_REPO_URL secret verbatim. That secret historically contains gitea.rogi.casa, which 526s through Cloudflare, so the clone still fails with 'Not a git repository'. Normalize the host to git.rogi.casa at runtime (sed) so the clone works regardless of the secret's stale host. Directly addresses the subdomain bug.