End-to-end test after security hardening of the blog deployment.
Changes implemented:
- Registry credentials now managed via External Secrets Operator
- Dedicated ServiceAccount with automountServiceAccountToken disabled
- CiliumNetworkPolicy restricting ingress/egress
- Rotated all compromised tokens