Adds a CI-only test fixture for deploying freshly-built plugin artifacts
to a test Headlamp instance without kubectl exec/cp. Approved under CTO
decision PRI-200 as a narrowly-scoped CI exception — production plugin
distribution remains ArtifactHub-only.
- scripts/deploy-plugin-to-headlamp.sh: packages plugin as tarball →
stores in ConfigMap → patches Headlamp deployment with init container
that extracts to static-plugins volume
- deployment/e2e-runner-rbac.yaml: minimal RBAC (configmaps, deployments,
replicasets, pods — no exec/cp)
- scripts/deploy-plugin-to-headlamp.test.sh: precondition and policy
compliance tests (9 assertions)
Co-Authored-By: Paperclip <noreply@paperclip.ing>