reuse_policy leaves external-secrets-audit-core intact so database leases keep working. AppRole delivered to Kubernetes; interim static ESO token retired.
Awaiting founder approve. Receiver already runs on the interim ESO token; phase 4 replaces it with an AppRole and an empty senders KV path.