Image builds are handled by ci-pipeline, not by compile-and-train or compile-and-deploy. Having them here caused network policy failures (Kaniko can't reach registry) and securityContext conflicts (Kaniko needs root). Also removed pod-level securityContext from compile-and-train since ci-builder needs root for cargo on PVC. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>