Retiring Authentik deleted the iam-jobs Application, so k8s/infra/iam stopped being synced. The new smtp-gotify relay would have sat in git and never been created. Add an iam-support Application for that path, and drop the stale rbac-dashboard-rolebinding reference from its kustomization: the file went away with Authentik, and a missing resource fails the whole app.