Switch Tenant from credsSecret to configuration field (v5 pods read config.env shell exports); pin image to RELEASE.2025-07-23 (the old 2024-06 tag was pulled from Docker Hub, ErrImagePull); drop prometheusOperator:true (made operator fail reconcile hunting Prometheus in ns default). MinIO now serves S3, 4/4 drives OK, root auth works. Operator's cosmetic 'empty tenant credentials' health-log is harmless (documented inline).