chore(gitops): pin manual secret annotation guard application

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e7fb-275d-7db0-b1df-39ed943427da

argocd/railiance01/applications/secret-annotation-guard.application.yaml

@@ -0,0 +1,22 @@
+# CUST-WP-0073-T03; supervised manual sync, no automatic pruning.
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: secret-annotation-guard
+  namespace: argocd
+  labels:
+    app.kubernetes.io/part-of: railiance-gitops
+    railiance-platform/component: secret-custody
+spec:
+  project: railiance-platform-addons
+  source:
+    repoURL: https://forgejo.coulomb.social/coulomb/railiance-platform.git
+    targetRevision: 800cbfa870661d47bee34c747f04f6145875adf1
+    path: argocd/platform-addons/secret-annotation-guard
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: default
+  syncPolicy:
+    syncOptions:
+      - ApplyOutOfSyncOnly=true
+      - PruneLast=true