[syscod3]

Summary

Deploys the Imp runner lifecycle redesign to unraid-lab using immutable source and image references. The operator, node agent, runtime, chart, and CRDs all come from the same verified source commit.

After reconciliation, the agent can read and delete one named runner Secret but can no longer list or watch Secrets. The runtime remains OnDelete, so its existing pods must be replaced and checked explicitly during rollout.

Immutable inputs

• Source: b86ab24ff584d5116376e6b890f40da081922a59
• Operator: ghcr.io/syscode-labs/imp-operator@sha256:ad3a0cc392d6a1956e66a57522d24da12141b128fe9c8b15966569003466020d
• Agent/runtime: ghcr.io/syscode-labs/imp-agent@sha256:326ed2e5fea1a579696d8a135e0e054822c26b9c38585f63cb442fb83d8d2cb8
• Build run: https://github.com/syscode-labs/imp/actions/runs/34128175236

Verification

• Repository validation and schema checks passed.
• GitOps pre-commit checks passed.
• The final Helm render contains get,delete for agent Secret access.
• The final Helm render contains the exact image digests above.
• imp-runtime renders with OnDelete.

---