Implement ACTIVITY-WP-0021 production automation reliability

Root-cause IssueSink 503 (dead Forgejo PAT on issue-core), add state-hub
task sink path B, log runs before emit, harden sync_schedules, deterministic
SBOM/triage reports, DB probe thrash fix, and prod automation-status helper.

k8s/railiance/10-infrastructure.yaml

@@ -57,16 +57,28 @@ spec:
                 secretKeyRef:
                   name: actcore-app-db-secret
                   key: database
+          # ACTIVITY-WP-0021-T07: BestEffort QoS + 1s probe timeout caused
+          # thrash (100s of restarts) when the single-node host was busy.
           readinessProbe:
             exec:
               command: ["pg_isready", "-U", "actcore"]
             initialDelaySeconds: 5
             periodSeconds: 10
+            timeoutSeconds: 5
+            failureThreshold: 6
           livenessProbe:
             exec:
               command: ["pg_isready", "-U", "actcore"]
-            initialDelaySeconds: 30
-            periodSeconds: 20
+            initialDelaySeconds: 60
+            periodSeconds: 30
+            timeoutSeconds: 5
+            failureThreshold: 6
+          resources:
+            requests:
+              cpu: 50m
+              memory: 256Mi
+            limits:
+              memory: 1Gi
           volumeMounts:
             - name: data
               mountPath: /var/lib/postgresql/data
@@ -138,16 +150,27 @@ spec:
                 secretKeyRef:
                   name: actcore-temporal-db-secret
                   key: database
+          # ACTIVITY-WP-0021-T07: same probe thrash fix as actcore-app-db.
           readinessProbe:
             exec:
               command: ["pg_isready", "-U", "temporal"]
             initialDelaySeconds: 5
             periodSeconds: 10
+            timeoutSeconds: 5
+            failureThreshold: 6
           livenessProbe:
             exec:
               command: ["pg_isready", "-U", "temporal"]
-            initialDelaySeconds: 30
-            periodSeconds: 20
+            initialDelaySeconds: 60
+            periodSeconds: 30
+            timeoutSeconds: 5
+            failureThreshold: 6
+          resources:
+            requests:
+              cpu: 50m
+              memory: 256Mi
+            limits:
+              memory: 1Gi
           volumeMounts:
             - name: data
               mountPath: /var/lib/postgresql/data