- Remove plaintext postgres:postgres DSN baked into image layer (Fix 1);
runtime manifests already inject the real DSN via secretKeyRef, so
ENV FXHNT_OPERATIONAL_DSN is now empty in the image.
- Drop `agent` extra from pip install in Dockerfile; langgraph/langchain
are no longer imported at module level in cli.py (Fix 2): imports of
AgentHunter, ResearchAgent, StructuredResearchAgent, build_tools moved
inside the `run` and `agent` command bodies respectively.
- Add imagePullSecrets (gitlab-registry) and nodeSelector
(k8s.scaleway.com/pool-name: platform) to fxhnt-dashboard Deployment
and fxhnt-forward CronJob pod templates (Fixes 3 & 4).
- Name the fxhnt-dashboard Service port `http` (Fix 5).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>