The reusable Operations workflow can report ArgoCD application status but cannot inspect the live network resources responsible for routing failures. Add a read-only resource operation restricted to non-secret network and policy kinds.
Acceptance: workflow_dispatch exposes resource, kind, and namespace inputs; strict allowlists prevent arbitrary resource access; the operation prints the selected live manifest; Prettier and CI pass.
The reusable Operations workflow can report ArgoCD application status but cannot inspect the live network resources responsible for routing failures. Add a read-only resource operation restricted to non-secret network and policy kinds.
Acceptance: workflow_dispatch exposes resource, kind, and namespace inputs; strict allowlists prevent arbitrary resource access; the operation prints the selected live manifest; Prettier and CI pass.