The deploy script had hardcoded 'rook-plugin' as the volume name
but should be 'headlamp-kube-vip-plugin' to match the ConfigMap.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Kubelet tries to fetch SA token immediately after deployment creates the pod,
but the SA may not be propagated yet. Setting automountServiceAccountToken: false
avoids this race. The SA token is not needed since E2E tests authenticate
via HEADLAMP_TOKEN passed as env var.