Execute the Flux source flip (root GitRepository → new repo)

[jorisjonkers-dev-agents]

Context. The one PR that actually cuts over: change only the root Flux GitRepository url / ref / path to JorisJonkers-dev/homelab-deploy deploy/production. Everything downstream is byte-identical (proven by Deployment Render Gate + behavioral parity).

Depends on. #21 (candidate read proven).

Steps

• Open the flip PR changing only the root source url/ref/path (no workload changes).
• Confirm the parity/render-drift checks are green on the PR.
• Merge during a quiet window; watch flux get kustomizations -A reconcile.
• Keep the old source and credentials available for fast rollback (do not delete yet).

Acceptance

• All Kustomizations reconcile Ready=True from the new source; no workload restarts/diffs beyond expected; rollback path still intact.

[jorisjonkers-dev-agents]

The cluster/flux/clusters/production/flux-system/gotk-sync.yaml in homelab-deploy already contains the target configuration pointing at JorisJonkers-dev/homelab-deploy on branch deploy/production (merged in homelab-deploy#22, 2026-07-07). The deploy/production branch is published and current.

The remaining step in this issue is the cluster-side apply:

kubectl apply -k cluster/flux/clusters/production/flux-system
flux reconcile source git flux-system -n flux-system

This issue tracks that operator step. Prerequisite: the Flux read credential (issue #21) must be in place first.