EnvironmentFile + direct venv ExecStart skipped k8s:// resolution and could not parse REPO_MAP JSON. Wrapper loads env safely and resolves ClusterIPs; PATH includes kubectl.
Add activity-core ops_run client, approach selection (FI/Binky/mail/agent), claim-loop worker with lease heartbeat, CLI run --from-ops-run and claim-loop, install units, and docs demoting issue-core to legacy external tickets. T05 timer cutover remains operator after five clean cycles.