fix: distinct RAND32 secrets, literal env writes, pinned kustomize (#547, #556)#561

Merged

lukepolo merged 2 commits into

mainfrom

audit/panel-hardening

Jul 12, 2026

Commits on Jul 10, 2026

fix: give each RAND32 secret a distinct value, write env vars literally, pin kustomize
Flegma
committed
fix: update_env_var mv must run even when grep filters all lines
Flegma
committed