Run one normal new-source deploy & confirm reconciliation

[jorisjonkers-dev-agents]

Context. Prove the new pipeline end-to-end with one ordinary change after the flip.

Depends on. #22 merged.

Steps

• Make a small real change (e.g. bump one image tag) via the normal deployment.yml → render → promote flow.
• Watch it land through deploy/production and reconcile on-cluster.
• Run the stack-integration-tests against the live stack.

Acceptance

• A normal change deploys cleanly through the new source; integration tests green; you're confident to start decommission (M4).

[jorisjonkers-dev-agents]

End-to-end pipeline verification after the source flip (issue #22 applied).

Verification flow:

1. Make a small change in homelab-deploy (e.g. bump a version pin or update a configmap value).
2. Run the Publish deploy branch dispatch workflow targeting production.
3. Confirm deploy/production branch updates and Flux reconciles via:

   flux reconcile kustomization flux-system -n flux-system
   flux get kustomizations -A

4. Confirm the change lands on the cluster (kubectl get the changed resource).

Success criteria: Flux reconciles from JorisJonkers-dev/homelab-deploy deploy/production with no errors. The context-refresh PR workflow (#38) is already auto-opening PRs against homelab-deploy, confirming the pipeline end is functional.