feat(deploy): railiance01 consistency sweep host mount and hostname override

Add git/ssh to the runtime image, mount /home/tegwick into the state-hub pod,
resolve host_paths via STATE_HUB_SWEEP_HOSTNAME, and fall back to the
railiance01 the-custodian canon path for classification validation.

deploy/railiance/apps/charts/state-hub/templates/deployment.yaml

@@ -20,6 +20,17 @@ spec:
       {{- with .Values.imagePullSecrets }}
       imagePullSecrets: {{- toYaml . | nindent 8 }}
       {{- end }}
+      {{- if .Values.sweep.enabled }}
+      volumes:
+        - name: sweep-repos
+          hostPath:
+            path: {{ .Values.sweep.hostPath | quote }}
+            type: Directory
+        - name: sweep-ssh
+          hostPath:
+            path: {{ .Values.sweep.sshHostPath | quote }}
+            type: DirectoryOrCreate
+      {{- end }}
       containers:
         - name: state-hub
           image: {{ include "statehub.image" . | quote }}
@@ -29,6 +40,26 @@ spec:
             - name: http
               containerPort: {{ .Values.service.targetPort }}
               protocol: TCP
+          {{- if .Values.sweep.enabled }}
+          lifecycle:
+            postStart:
+              exec:
+                command:
+                  - /bin/sh
+                  - -c
+                  - git config --global --add safe.directory '*'
+          volumeMounts:
+            - name: sweep-repos
+              mountPath: {{ .Values.sweep.hostPath | quote }}
+            - name: sweep-ssh
+              mountPath: /root/.ssh
+              readOnly: true
+          env:
+            - name: STATE_HUB_SWEEP_HOSTNAME
+              value: {{ .Values.sweep.hostname | quote }}
+            - name: GIT_SSH_COMMAND
+              value: "ssh -o StrictHostKeyChecking=accept-new -F /root/.ssh/config"
+          {{- end }}
           envFrom:
             {{- if .Values.config.enabled }}
             - configMapRef:

deploy/railiance/apps/charts/state-hub/values.yaml

@@ -64,4 +64,11 @@ securityContext: {}
 
 nodeSelector: {}
 tolerations: []
-affinity: {}
+affinity: {}
+
+# Consistency sweep: mount railiance01 clone tree and match host_paths hostname.
+sweep:
+  enabled: false
+  hostname: ""
+  hostPath: /home/tegwick
+  sshHostPath: /home/tegwick/.ssh

deploy/railiance/apps/helm/state-hub-values.yaml

@@ -10,3 +10,9 @@ image:
 
 ingress:
   enabled: false
+
+sweep:
+  enabled: true
+  hostname: 239.62.205.92.host.secureserver.net
+  hostPath: /home/tegwick
+  sshHostPath: /home/tegwick/.ssh