Pin approved lifecycle and dispatcher manual GitOps applications

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a10780-6d41-7952-9718-dfbc1f41236f

argocd/railiance01/applications/informed-decision.yaml

@@ -0,0 +1,17 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: informed-decision
+  namespace: argocd
+spec:
+  project: informed-decision-lifecycle
+  source:
+    repoURL: https://forgejo.coulomb.social/coulomb/informed-decision.git
+    targetRevision: b5b5a5aa7fd5a10555992a7bea9fac949f3df48d
+    path: deploy/lifecycle
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: informed-decision
+  syncPolicy:
+    syncOptions:
+    - ApplyOutOfSyncOnly=true

argocd/railiance01/applications/state-hub-memo-dispatch.yaml

@@ -0,0 +1,17 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: state-hub-memo-dispatch
+  namespace: argocd
+spec:
+  project: informed-decision-lifecycle
+  source:
+    repoURL: https://forgejo.coulomb.social/coulomb/state-hub.git
+    targetRevision: c69c4c6f2cff4ab460fa69b01993a432a730bb46
+    path: deploy/informed-decision
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: state-hub
+  syncPolicy:
+    syncOptions:
+    - ApplyOutOfSyncOnly=true

argocd/railiance01/bootstrap/06-informed-decision-lifecycle-project.yaml

@@ -0,0 +1,36 @@
+apiVersion: argoproj.io/v1alpha1
+kind: AppProject
+metadata:
+  name: informed-decision-lifecycle
+  namespace: argocd
+spec:
+  sourceRepos:
+  - https://forgejo.coulomb.social/coulomb/informed-decision.git
+  - https://forgejo.coulomb.social/coulomb/state-hub.git
+  destinations:
+  - server: https://kubernetes.default.svc
+    namespace: informed-decision
+  - server: https://kubernetes.default.svc
+    namespace: approval-engine
+  - server: https://kubernetes.default.svc
+    namespace: flex-auth
+  - server: https://kubernetes.default.svc
+    namespace: state-hub
+  clusterResourceWhitelist:
+  - group: rbac.authorization.k8s.io
+    kind: ClusterRole
+  - group: rbac.authorization.k8s.io
+    kind: ClusterRoleBinding
+  namespaceResourceWhitelist:
+  - group: ''
+    kind: ServiceAccount
+  - group: ''
+    kind: PersistentVolumeClaim
+  - group: ''
+    kind: ConfigMap
+  - group: ''
+    kind: Service
+  - group: apps
+    kind: Deployment
+  - group: networking.k8s.io
+    kind: NetworkPolicy