- Pods are now created fresh on first reconcile instead of trying to update
existing pods (which fails because Update strips API-injected fields like
volumes, serviceAccountName, and nodeName)
- Added ImagePullPolicy: Never for locally-built Nix images
- Wired Volumes and VolumeMounts from Agent spec into pod spec
- Wired user-defined Env vars from Agent spec
- Image changes now handled via delete+recreate instead of pod update
- Added podImageEqual helper to detect when image change requires recreation
Fixesmarcus/scobleclaw#10