The new kea-operator repo's Woodpecker pipelines run under a dedicated
Kubernetes ServiceAccount that must exist in the woodpecker namespace.
- Add ServiceAccount kea-operator-ci in the woodpecker namespace
- Register it in the woodpecker kustomization resources
Claude-Session: https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT