f0f3bd51a4
Align workflow with org RBAC policy — agents have read-write access only in privilegedescalation-dev, not the default namespace. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>