- Remove configmap.yaml from resources (conflicted with configMapGenerator)
- Define TEMPORAL_* vars as literals in configMapGenerator
- This fixes the namespace transformation ID conflict
Change configMapGenerator and secretGenerator behavior from 'merge'
to 'create' since target ConfigMap/Secret don't exist on first deploy.
'merge' only works when the resource already exists.
Implements real activity-calling logic in OrchestratorWorkflow and
TaskUnitWorkflow (previously stubs), adds GitDiffActivity, and expands
PlanningActivity's I/O to carry repo path and prior task results.
Adds k8s/ deployment manifests (worker Deployment, orchestrator Job,
Kustomize base) for the poimen-workflows Temporal worker, using a
dedicated Kubernetes namespace `poimen` and Temporal namespace
`poimen-harness` rather than sharing the Temporal server's own
`temporal`/`production` namespaces.