This change was committed straight to main, bypassing the required PR review.
Reverting main to baseline; the change is preserved on branch
scrubs/gro-2536-gitops-fix-forward-rule and will land via PR review (GRO-2536).
cc @cpfarhood
The board flagged that agents repeatedly requested board approval and hand-run
kubectl on a Flux-managed cluster — unfillable, wrong, and the root cause of a
multi-day stall. The devops skill prohibited `kubectl apply` to prod but never
stated the corollary: the resolution of any reconcilable breakage is a PR to
groombook/infra, never a human-run command. This adds that contract explicitly.
cc @cpfarhood
Scrubs McBarkley
Flea Flicker