feat: surface serviceAccountName in adapter UI config (FAR-77)

Adds serviceAccountName field to the Kubernetes group in getConfigSchema()
so operators can specify a dedicated SA (e.g. paperclip-developer) for Job
pods that need k8s API access. The field was already consumed in job-manifest.ts;
this makes it visible in the UI. Bumps to 0.1.25.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

src/server/config-schema.ts

@@ -55,6 +55,13 @@ export function getConfigSchema(): AdapterConfigSchema {
       },
 
       // Kubernetes fields
+      {
+        key: "serviceAccountName",
+        label: "Service Account",
+        type: "text",
+        hint: "Kubernetes ServiceAccount name for the Job pod; defaults to the namespace 'default' SA. Use a dedicated SA (e.g. paperclip-developer) when the Job needs API access.",
+        group: "Kubernetes",
+      },
       {
         key: "namespace",
         label: "Namespace",