e78795bf4f
Records that the in-cluster Service DNS could not be used for a dashboard-registered worker (engine publicOnlyTransport SSRF guard blocks internal addresses), the pivot to st-app chart + public ingress at arcade-eval-ref.st.dev (CNAME -> k8s-backstage.st.dev), and the verified end-to-end whoami result. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>