Close verified incident task and finish local workplan loose ends

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e3c3-621b-7350-9f77-50a8d3ee7657

argocd/railiance01/drafts/external-secrets.application.yaml

@@ -1,6 +1,6 @@
 # DRAFT for railiance01 (RPF-WP-0044). Not synced by any root: move to
 # ../applications/ only in this app's adoption task, with the founder's go-ahead.
-# No automated sync, no finalizer. targetRevision: chart version; T06 adds CRD Prune=false,Delete=false before merge.
+# No automated sync, no finalizer. CRDs survive Application pruning/deletion.
 apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
@@ -21,6 +21,9 @@ spec:
       releaseName: external-secrets
       values: |
         installCRDs: true
+        crds:
+          annotations:
+            argocd.argoproj.io/sync-options: Prune=false,Delete=false
         serviceAccount:
           create: true
           name: external-secrets