- Disabled Flux variable substitution on all CRDs to prevent schema corruption with post‑build substitution.
- Fixed controller issues: SOPS .ini decryption, dry‑run errors with strategic merge patches, and a broken in‑memory kustomization build.
- Cached registry auth token during Notation verification and updated dependencies for performance and stability.