gitops Deploy a Suspended CronJob, Run It Once, Then Trust the Schedule A nightly job against a fresh secret is how you get pager noise at 03:15 UTC. The GitOps-safe order: deploy suspended, verify by hand, then unsuspend.
