Wait for DinD before starting forgejo-runner daemon; use TCP/_ping probes so the Deployment reports available once both containers are up.
DinD sidecar + forgejo-runner Deployment with PVC-backed registration state. Makefile targets for registration secret, deploy, and status.