feat: phase 8 serviceadapter crd rollout (32/33 tasks)

tasks/AGENT-PROMPT.md

@@ -41,6 +41,10 @@ not state how. The design is yours to reason out. The checkboxes are the contrac
 
 G1  ingress-nginx owns TLS. The gateway never terminates TLS.
 G2  The gateway holds no Kubernetes credentials. Config comes from git, not a CRD.
+    Narrow exception for Phase 8 tasks (8.1+): the gateway ServiceAccount may hold a
+    namespace-scoped, read-only (get/list/watch) Role on the ServiceAdapter CRD only
+    — see tasks/INDEX.md's G2 line and API_ROUTING_HYBRID_DESIGN.md's Context section.
+    This is pre-approved; do not stop on it as a violation for Phase 8 work specifically.
 G3  Public surfaces use standard protocol shapes. If an OpenAI or Anthropic SDK
     cannot call it unmodified, the design is wrong.
 G4  Streaming is unbuffered, and a client disconnect cancels the upstream request.