feat: enable daily CNPG Option A backup on railiance01

Wire worker kubeconfig hostPath (no PATH override), enable
daily-cnpg-option-a-backup for R01 targets, ESO already synced.

k8s/railiance/20-runtime.yaml

@@ -1251,8 +1251,8 @@ spec:
               value: /kube/config-hosteurope
             - name: KUBECONFIG_CORE
               value: /kube/config
-            - name: PATH
-              value: /opt/railiance-platform/tools/vendor/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+            # Do not override PATH — image venv must stay first for temporalio/etc.
+            # Backup CLI prepends tools/vendor/bin itself.
           envFrom:
             - configMapRef:
                 name: actcore-runtime-config